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Chapter 1 


BIOS Programming 
Overview 


The following chapters provide information necessary to implement a system BIOS that supports the Astro 
TM8000 processor. The focus is on the unique features of the Crusoe processor—this information is not 
intended to document generic system BIOS requirements. 


Reference Documents 


The following documents should be used in conjunction with this guide: 
* Astro Processor Data Book 

« Astro Processor Code Morphing Software Guide 

. PCI Local Bus Specification, PCl SIG Revision 2.1 


* PCI Hardware and Software - Architecture and Design (4th eat.), by Edward Solari amd George Willse, 
Annabooks, San Diego, 1998 


* JEDEC Standard No. 21-C (11/25/97) 


Changes Since 8/7/03 Version 


* Changes to cover page 


- Added Efficeon™ logo. 
- Updated hardware revision number. 


- Updated CMS revision number. 
* Changes to Chapter 7, Processor and Frequency Detection 


- | Updated description for CPUID Function 8086 0002h on page 133, register EAX. 
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Chapter 2 


Buses and 
Connections 


The major components of a TM8000 processor-based system are illustrated in the following diagram: 


Figure 1: Example TM8000 Processor System Block Diagram 
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2.1 


2.2 


2.3 


Major components include the processor, system memory, graphics controller, and southbridge. Other 
supporting components are also shown in the table. For more information on the features, interfaces, and 
specifications of the TM8000 processor, see the TM8000 Data Book. 


CPU Interface 


This section will describe the TM8000 CPU interface to the TM8000 VNB in a future revision. 


Snoop Cache Support 


This section will describe the snoop cache supported by the TM8000 VNB in a future revision. 


Write Combining Support 


This section will describe the write-combining support in the TM8000 VNB in a future revision. 


SDRAM Interface 


The integrated northbridge in the TM8000 processor has an SDRAM memory interface that supports Double 
Data Rate (DDR) SDRAM chips. The SDRAM interface operates at up to 166MHz, providing support for 
DDR333 memory modules. The memory interface has an SPD interface to the Serial Presence Detect (SPD) 
ROMs on the DIMM modules installed in the four DIMM slots. The TM8000 VNB performs the memory 
configuration for DIMM modules that have SPD ROMs, and for soldered-down SDRAM memory chips that 
have a memory definition entry in the OEM configuration table. 


The SDRAM interface is described in detail in Chapter 4, Memory on page 31. Also see SDRAM Memory 
Controller Registers (Device 0, Function 1-4) on page 91. 


HyperTransport Bus Interface 


The TM8000 processor provides a HyperTransport bus interface that is used to connect to a southbridge chip 
that supports the HT bus as well. Additionally, other HT tunnel or bridge devices may be connected between 
the TM8000 processor and the southbridge chip to form more complex HT fabrics. 


The HyperTransport I/O interface operates at 400 MT/s simultaneously in both the upstream and downstream 
directions. Upstream and downstream links are each 8 bits wide. 
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2.4 


2.9 


The TM8000 processor provides an 8 bit transmit and an 8 bit receive link interface that operate at a 
frequency of 200 MHz. The data transfer is done on both edges of the clock, resulting in a data transfer rate 
of 400 MB/sec in each direction for a combined data rate of 800 MB/sec on the HT link. 


The TM8000 VNB has a host bridge that provides the processor interface to the HT bus. The HT bus is bus 0 
in the system and the host bridge is device 0 on that bus. (See HT Bridge Registers (Device 0, Function 0) on 
page 51.) Software accesses to the southbridge devices or to devices connected to the southbridge use the 
HT bus to reach the southbridge. The southbridge has a bridge between the HT bus and the PCI bus anda 
bridge between the HT bus and the LPC bus. The HT bus is used by bus master devices connected to the 
southbridge to access the SDRAM memory for reads and writes and the AGP bus for writes. 


The TM8000 VNB also has an AGP bridge that is used to access a device on the AGP bus. Normally, this 
AGP device is the graphics controller used to display the operating system desktop and to display application 
video output data. The AGP bridge is logically on the HT bus as device 1. It is a virtual bridge device that does 
not physically connect to the HT bus directly. The TM8000 hardware transfers data to and from the AGP port 
bus interface and the other components in the VNB. From and x86 software perspective the AGP bridge 
appears as an HT to PCI bridge that has a PCI-PCI bridge configuration header and an HT capability register 
block. 


Differences Between HT and PCI 


Once HT is configured, the HT bus acts similar to a PCI bus from an x86 perspective. Configuration and 
status information specific to HyperTransport technology is mapped into configuration space using the 
capabilities list methodology described in the PCI Local Bus Specification, Revision 2.2. 

There are settings in the VNB that control how MMIO, IOIO, VGA, etc resources are handled on the bus as 


either compat or non-compat. Non-compat allows posting of the writes to these regions, while compat 
expects every transaction to finish before starting the next one (non-posted). 


AGP Bus Interface 


The AGP graphics interface operates at 1.5 V and up to 4x transfer speeds. 
This section will describe the AGP interface in the TM8000 VNB in detail in a future revision. 


Also see AGP Host Bridge Configuration Registers (Device 1) on page 113. 


LPC Bus Interface 


IMPORTANT. This section applies only to configurations involving a ROM controlled by the TM8000 LPC 
ROM controller—i.e. an LPC ROM directly connected to a TM8000. 


There are two aspects to the LPC ROM access. The first is the ROM mapping control—i.e. the way to 
control how much of the ROM is memory-mapped and where. The second is the ROM write protect 
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2.5.1 


control—i.e. how much or little of the ROM is write protected by the chipset. The ROM itself may have 
additional write-protect functionality that may or may not be used by the BIOS or CMS. 


Notes 

Throughout this section, unless explicitly stated otherwise, the term "BIOS portion" of the ROM includes the 
BIOS boot sector. The TM8000 VNB does not inherently differentiate between the BIOS boot sector and 
the non-boot BIOS sectors. The facilities explained below, however, can be used to provide distinct levels 
of protection for those two regions. 


Both ROM mapping and write protection are unaffected by either Suspend/Resume or INIT. 


ROM Mapping Control 


There are two regions of the x86 address space that can be mapped to the ROM. Both of them extend 
downwards from a particular address boundary that corresponds to the top of the ROM. 


One region is called the upper ROM region. It is contiguous and extends downwards from 4GB in 16KB 
increments. It can extend as far as 16MB, minus 16KB, below 4GB (i.e. the base can be as low as 
OxFF004000). There is no address relocation in this range. That is, address X in the region corresponds to 
address X in the LPC-connected ROM. This region allows visibility to up to nearly 16MB of LPC ROM device 
address space from the top down. There is a limit of 8MB of ROM array space; the additional addressability 
provides visibility to the non-array, register space of the LPC ROM devices. 


The other region is called the lower ROM region. It is also contiguous and extends downwards from 1MB in 
16KB increments. It can extend as far as 256KB below 1MB. This region is relocated so that address (1MB - 
X) in the region corresponds to address (4GB - X) in the LPC-connected ROM. This region allows visibility to 
up to 256KB of ROM from the top down. It is typically used as a partial alias for the upper ROM region. 


Each region is defined by a VNB register. The VNB register holds the size of the region in 16KB increments. 


UP_ROM_SZ 


VNB register UP_ROM_SZ can hold values between (and including): 


0: The upper ROM region is 0*16KB = OKB, i.e. empty 
1023: The upper ROM region is 1023*16KB = 16,368KB 


* ROM_UPPER_SIZE is a 10-bit field within this register. The reset value of this field is 4 (i.e. 64KB of the 
ROM are mapped). Also see Upper ROM Size Register on page 76. 


LOW_ROM_SZ 


VNB register LOW_ROM_SZ can hold values between (and including) 


0: The lower ROM region is 0*16KB = OKB, i.e. empty 
16: The lower ROM region is 16*16KB = 256KB 


* ROM_LOWER_SIZE is a 5-bit field within this register, but only one value with the MSB set is legal. Any 
value larger than 16 is silently converted to 16 when written. The reset value of this field is 4 (i.e. 64KB of 
the ROM are mapped). Also see Lower ROM Size Register on page 76. 
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Notes on ROM Mapping Control 


* These registers only affect accesses to LPC-connected ROM. They have no effect on a ROM connected 
to the southbridge. 


* The PAB bits take precedence over the mapping carried out by ROM_LOWER_SIZE. In particular, the 
ROM controller logically resides on the HT bus. Thus if the PAB bits for some legacy region (below 1MB) 
route requests (reads or writes independently) to memory, ROM_LOWER_SIZE is ignored for the 
requests routed to memory. 


* The upper ROM region can be extended so that (part of) CMS can be read out of the ROM (assuming 
suitable bankless ROM configuration). CMS is never visible through the lower ROM region. 


ROM Write Protection Control 


Write protection of the ROM occurs by silently ignoring (squashing) writes to the protected regions. The 
squashed writes do not go to memory nor to any other device. The writes are squashed in the northbridge, 
not in the CPU, so they are subject to segmentation, paging, page protection, alignment, debug, etc. checks 
and faults in the CPU. The BIOS portion of the ROM is write-protected from the top down. The protection is 
not specific to a mapping region. It applies to both (i.e. upper and lower) mapping regions simultaneously. 
Thus if the top 64KB of the ROM are protected, writes through either mapping region into the top 64KB of the 
ROM are squashed. 


There are two protection boundaries into the ROM: the forbidden boundary, and the protected boundary. Both 
of these boundaries, once lowered from the top of the ROM, can only be raised by reset, or under restricted 
conditions. Those conditions differ between the two boundaries, and are described below. A write is 
squashed if it falls into a ROM region and above either the forbidden or the protected boundary. 


The VNB registers used to define the boundaries are as follows: 


ROM_FRBDN 


* ROM_FORBIDDEN_SIZE: this field can hold values between (and including): 


0: The ROM forbidden region is 0*16KB = OKB, i.e. empty 
BIOS size (in 16KB units): The ROM forbidden region covers the entire BIOS portion. 


ROM_FORBIDDEN_SIZE is a 10-bit field within this register. It is capped at the value corresponding to 
the size of the BIOS portion. Any value larger than this is silently converted to the capped value when 
written. This register never decreases in value (i.e., the VNB will ignore writes that try to write a smaller 
value than the current one) when the processor is not in SMM mode. When the processor is in SMM 
mode, any value can be written. The reset value of this field is 0. 


* GLOBAL_WRITE_ENABLE: this field controls whether the CMS portion of the ROM is writeable. 
GLOBAL_WRITE_ENABLE is a single bit with the following meanings. 


0: ROM_FORBIDDEN_SIZE and ROM_PROTECTED_SIZE control the write protection of the 
BIOS portion. The CMS portion of the ROM is unwritable. This is the reset default. 
1: All visible ROM (as specified by the mapping registers settings) is writable. 


The permission bestowed by this field is significant; hence it is write-protected by a combination of OEM 
Configuration Table settings and setting of an input signal on the TM8000. When the OEM config 
upgrade_option entry's global_write_security field is: 
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00b:ROM_WRITE_SECURE—GLOBAL_WRITE_ENABLE cannot be written. 

01b: ROM_WRITE_HW_DONGLE—GLOBAL_WRITE_ENABLE can only be written if the chip's input 
pin L_SECURE is at a logic "low" level. It's expected that this pin would normally be connected 
to a circuit requiring a manual action (e.g., attaching a dongle, inserting a paper clip in a hole, 
etc.) to drive low. 

10b:ROM_WRITE_INSECURE—GLOBAL_WRITE_ENABLE is writable. 


Also see Forbidden ROM Size Register on page 77. 
ROM_PRTCTD 


VNB register ROM_PRTCTD contains the ROM_PROTECTED_ SIZE field, which can hold values between 
(and including): 


0: The ROM protected region is 0*16KB = OKB, i.e. empty 
BIOS size (in 16KB units): The ROM protected region covers the entire BIOS portion. This is the default. 


* ROM_PROTECTED_ SIZE is a 10-bit field within this register. It is subject to the same BIOS size based 
capping as described above for ROM_FORBIDDEN_SIZE. The reset value of this field is that which 
corresponds to the BIOS size (i.e. the BIOS is completely protected). This field can only be written with 
smaller values under the following conditions involving OEM config and chip input pin values. Once 
decreased from the reset default value, it can be written with a larger value (up to the limit) at any time. 
When the OEM config upgrade_option entry's bios_write_security field is: 


Ob: BIOS_WRITE_CONTROLLED—ROM_PROTECTED_SIZE can only be decreased if the chip's 
input pin BIOS_WE is at a logic "high" level. It's expected that this pin would normally be 
connected to a general purpose output of the southbridge, giving the designer a platform- 
specific means of protecting the BIOS. 

1b: BIOS_WRITE_INSECURE—ROM_PROTECTED_ SIZE can be decreased at any time. 


Notes on ROM Write Protection Control 


* The PAB bits take precedence over the write protection carried out by ROM_FORBIDDEN_SIZE and/or 
ROM_PROTECTED_ SIZE. In particular, the ROM controller logically resides on the HT bus. Thus if the 
PAB bits for some legacy region (below 1MB) route write requests to memory, 
ROM_FORBIDDEN/PROTECTED_SIZE is ignored and the write to memory occurs. 


* The Astro VNB can only control writes to an address range. It does not control sectoring in the ROM. 
Thus if one of the protection boundaries is not set to a ROM sector boundary, the ROM sector being split 
by the boundary has the following property: 


- No writes are allowed above the boundary 
- Writes are allowed below the boundary 


- Sector erase commands are allowed below the boundary, but since they affect a straddled sector, 
they also erase the protected part of the sector. 


Thus for correct operation, the protection boundaries should always be set to ROM sector boundaries. 
The ROM sector boundaries are ROM-dependent, often aligned 64KB except for smaller sectors at the 
top (boot and parameter blocks). 


* Some ROMs have whole chip-erase commands that erase the whole ROM with a single command. Short 
of extending the forbidden region to cover the complete ROM, such commands can be issued if there is 
any writable part of the ROM. Such ROMs should be avoided since they would make VNB-based ROM 
protection moot. 


Also see Protected ROM Size Register on page 77. 
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Chapter 3 


System Address Map 


The TM8000 processor running Code Morphing™ software (CMS) supports 4GB1 of addressable memory 
space and 64 KB + 3 of addressable input/output space. 


The memory space under 1 MB is the DOS-compatible memory address space. Some areas of the 
compatible memory space are controlled by the Programmable Attribute Bits (PAB) registers as described in 
Programmable Memory Attribute Registers on page 63 and as shown in Figure 2 on page 20. The PAB 
registers control whether reads and writes to these memory addresses are directed to system memory in 
SDRAM or to the one of the device I/O buses—the HT bus, the AGP bus, or the LPC bus. 


Figure 2 on the following page shows the system memory address map. 


1. The TM8000 VNB implements a 32-bit address space; any address of 4GB or greater is wrapped 
into the corresponding address below 4GB. 
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Figure 2: 


Memory Address Ranges 


The following figure shows the system memory map including several programmable memory ranges 
supported by the TM8000 VNB. The compatibility region is also shown. 


System Memory Address Map 
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Figure 2 shows the programmable memory ranges for the AGP graphics aperture, the graphics address 
translation tables (GATT), the graphics non-local frame buffer, the AGP local frame buffer, and the AGP 
MMIO register range. The GATT and graphics non-local frame buffer memory ranges are allocated by the 
operating system and are in the system SDRAM. The GATT must be located in write-back cacheable 
memory while the non-local frame buffer is not required to be write-back cacheable and may be write- 
combinable memory. 
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The other programmable memory ranges are programmed using the PCI configuration mechanism and are 
programmed using the configuration registers shown in Figure 2. These memory ranges are all located in the 
memory mapped I/O (MMIO) range of addresses. All of the programmable memory ranges must be 
programmed so that they do not overlap one another. Unpredictable results occur if these ranges overlap. 


3.1.1 


Compatibility Area 


This area is divided into the address regions shown in the following table. Some of the address regions have 
fixed address routings while other regions are controlled by the settings in the Programmable Attribute Bit 
(PAB) registers (see Programmable Memory Attribute Registers on page 63). 


Table 1: Compatibility Memory Area Attributes 
Address Range Memory Section | Attributes Comments 
000000h - O9FFFFh 0 to 640 KB Always mapped to SDRAM. DOS Area. 


0A0000h - OBFFFFh 


640 to 768 KB 


Mapped to AGP bus or HT bus; routed 
to SMRAM if the A region is enabled in 
SMM mode. 


VGA Video Buffer on AGP device or 

on VGA device connected via the HT 
bus. If SMM mode is enabled, this is 

the A region. 


O0CO000h - ODFFFFh 


768 to 896 KB 


PAB1—PAB4 control R/W routing in 16 
KB sections. 


A total of eight 16 KB sections used as 
an Expansion Area for add-in card 
ROM BIOS and data buffer areas. The 
address range 768 - 800 KB is 
typically used for the VGA BIOS. 


OE0000h - OEFFFFh 


896 to 960 KB 


PAB5 and PAB6 control R/W routing in 
16 KB sections. 


Extended System BIOS Area. 


OFOO00h - OFFFFFh 


960 to 1MB 


PABO[7:4] controls R/W routing. 


System BIOS Area. 


100000h - 10FFEFh 


1MB to 
1 MB + 64KB - 16 


Always mapped to SDRAM. 


High Memory Area (HMA). If A20 
Masking is enabled, this address 
range maps to the corresponding 
addresses with address bit 20 set to 0 
(i.e., the range 00000h — OFFEFh). 


DOS Area 


The DOS area, from 0 to 640 KB, is used by the DOS operating system to store the interrupt vector table, the 
BIOS data area, DOS system software, and to run DOS application programs. It is always mapped to 
SDRAM. 


VGA Video Buffer Area 


When System Management Mode (SMM) is not active, the 128 KB VGA video buffer area from 640 to 768 KB 
is normally mapped to the legacy VGA portion of the AGP graphics controller over the AGP bus. The 
VGA_EN bit in the AGP bridge BCTRL register controls whether the VGA video buffer area is mapped to the 
AGP graphics controller or is instead mapped to the HT bus to be forwarded to a PCI or ISA bus VGA card. 


When SMM is active, the use of this area by the SMM software is controlled by the SMRAM_CR and 
E_SMRAWN_CR registers. If the G_LSMRAM_EN bit is set in the SMRAM_CR register and the HHSMRAM_EN 
bit is zero then accesses in this range are mapped to the SMRAM. If the HLISMRAWN_EN bit is set then 
accesses in this range are mapped as described in the previous paragraph and the next paragraph. 
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Monochrome Adapter (MDA) Range 


The mapping of addresses in the VGA video buffer area can be controlled further using the MDAP bit in the 
NBCFG register. When this bit is set it indicates that a monochrome display adapter (MDA) card is present 
and the address range from BOO00h to B7FFFh are routed to the HT bus to be forwarded to the MDA card 
regardless of the setting of the VGA_EN bit. 


Expansion Area 


This 128 KB Expansion Area is divided into eight 16 KB regions controlled by the PAB registers 1 to 4. Each 
of the eight regions can be set so that read and write accesses are independently mapped either to SDRAM 
or to peripheral space, where peripheral space can be on the HT bus or the local ROM. (Addresses in the 
Compatibility Area cannot be directed to the AGP bus.) Within peripheral space, the steering between the HT 
bus and the local ROM is governed by the LOW_ROM_SZ Register. Note that this register defines a 
contiguous region reaching down from the 1MB boundary; thus it is not the case that every PAB register 
controlled region can be independently steered to SDRAM, HT bus or Local ROM. For example, if both 
address ranges EQ000h:FFFFFh (System BIOS) and C0000h:C7FFFh (Video BIOS) are situated in the Local 
ROM, the intervening address range of C8000h:DFFFFh cannot be used to access devices on the HT bus. 


The Expansion Area is typically used by add-in cards for their ROM BlOSes and data buffers. The ROM 
BlOSes should be shadowed to SDRAM for optimal performance. The VGA ROM BIOS normally is located at 
addresses in the range CO000h to C7FFFh. The default settings, for the PAB registers controlling this area, 
are to route read and write accesses to peripheral space. 


Extended System BIOS Area 


This 64 KB area is divided into four 16 KB regions controlled by PAB registers 5 and 6. Each of the four 
regions can be set so that read and write accesses are independently mapped either to SDRAM or to 
peripheral space. The description of steering within peripheral space given previously in the section on 
Expansion Area applies here, as well. 


This area is typically used as part of the Expansion Area. It was used as an area for an Extended System 
BIOS in some early PC systems. The default settings, for the PAB registers controlling this area, are to route 
read and write accesses to peripheral space. 


System BIOS Area 


This 64 KB area is controlled by bits 7:4 in PAB register 0. It can be set so that read and write accesses are 
independently mapped either to SDRAM or to peripheral space. The description of steering within peripheral 
space given previously in the section on Expansion Area applies here, as well. The default settings, for the 
PAB register 0 bits controlling this area, are to route read and write accesses to peripheral space. 


High Memory Area 


The use of this area of SDRAM depends on the setting of the A20 address bit masking control. If A20 
masking (i.e., forcing to zero) is disabled, address bit 20 is enabled and this area is present in SDRAM. If the 
A20 masking is enabled, the address bit is forced to 0; consequently this area is not present and accesses to 
this address range are wrapped to the address range 00000h to OFFEFh. 


The state of A20 masking on TM8000 depends on 4 components. Any one of them being set to disable A20 
masking forces masking to be disabled (i.e., the value of address bit 20 is respected, and address space 
“wrapping” or “folding” does not occur). 
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3.1.2 


Table 2: 


* Abit in an MSR that can be used to disable A20 masking. 

« Whether the CPU is in SMM or not. SMM mode forces A20 masking to be disabled. 
¢ — Snooping of port 0x92 in the SB 

*« — Snooping of ports 0x60/0x64 in the KBD controller 


The first two components are CPU internal. The latter two are the result of snooping, but the CPU restores 
their state at an RSM from the SSM. 


While in SMM, A20 masking is disabled, and the processor ignores any A20 manipulation via port 0x92 in the 
SB or ports 0x60/0x64 in the KBD controller. When the RSM that returns the processor from SMM is 
executed, the A20 masking is restored to the state it had immediately before SMM was entered. In this way, 
the processor's view of A20 masking can become inconsistent with that of the platform (SB and/or KBC). 
Therefore, it is recommended that before exiting, SMM software set the port 0x92 and ports 0x60/0x64 A20 
masking to be consistent with the state recorded in the SSM. 


Furthermore, INIT acts as if port 0x92 had been written to disable A20 masking. The reason for this is that the 
ROM hardware on TM8000 does not double-map the top 1MB of the ROM at both 4GB-1MB (normal) and 
4GB-2MB (for A20-wrapped situations), thus an INIT with A20 masked would result in a fetch from location 
4GB-1MB-16 instead of 4GB-16. Since 4GB-1MB-16 does not generally contain an x86 reset vector (that 
jumps to below 1MB which works either way), INIT must reset the state of 0x92. Therefore, it is also 
recommended that shortly after INIT, software set the port 0x92 A20 masking to the disabled state, to ensure 
consistency between the processor and the platform. 


Extended Memory Area 


The Extended Memory Area covers the address range 0010_0000h (1MB) to FFFF_FFFFh (4 GB - 1). The 
use of this address range is shown in the following table. 


Extended Memory Area Attributes 


Address Range Memory Section Attributes 

0010_0000h to X86TOP Main SDRAM address | System memory in SDRAM: 
range X86TOP = TOM - TSEG_SIZE 

X86TOP to TOM Extended SMRAM SMM Extended T region SMRAM 
Address Range (if TSEG_SIZE not zero) 

TOM to FEBF_FFFFh HT and AGP memory | MMIO addresses which are routed to the HT 
mapped I/O address bus. There are three exceptions to this: 
ranges APBASE to APBASE + APSIZE: Graphics 


(more below) Aperture address range. Addresses in this 


range are remapped to System Memory. 


MBASE to MLIMIT: AGP MMIO address range. 
Addresses in this range are routed to the AGP 
bus. 


PMBASE to PMLIMIT: AGP Local Frame Buffer 
address range. Addresses in this range are 
routed to the AGP bus. 


FECO_0000h to FECO_OFFFh_| APIC configuration I/O APIC default address range. 
space 


FECO_1000h to FEDF_FFFFh_ | HT/AGP MMIO ranges | MMIO addresses which are routed to HT bus 
(see above). 
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Extended Memory Area Attributes (Continued) 


Address Range Memory Section Attributes 
FEEO_0000h to FEEO_OFFFh_ | APIC configuration Default addresses reserved for Local APIC. 
space 


FEEO_1000h to FEE9_FFFFh HT/AGP MMIO ranges | MMIO addresses which are routed to HT bus 
(see above). 


FEEA_0000h to FEEB_FFFFh_ | High SMRAM Address | SMM HSEG default base address set by 
Range HSEG_BASE register, relocatable 


FEEC_0000h to FFDF_FFFFh |HT and AGP memory | MMIO addresses which are routed to HT bus. 
mapped I/O address 
ranges 


FFEQ_0000h to FFFF_FFFFh High BIOS Area. 


Main SDRAM Address Range 


The addresses in the 1 MB to X86TOP range are routed to the SDRAM and are used by the operating system 
as system memory. The X86TOP value is equal to the value in the TOM register if there is no SMM Extended 
T region (i.e., SMRAM_CR[G_SMRAM_EN] is 0, or E_ SMRAM_CR[T_SMRAM_EN] is 0, or the TSEG_SIZE 
register is zero). If SMRAM_CR[G_SMRAM_EN] is 1, and E_SMRAM_CR[T_SMRAM_EN] is 1, and 
TSEG_SIZE is not zero, then X86TOP is set to TOM - TSEG_SIZE. The AGP graphics address translation 
tables (GATT) is allocated in write-back cacheable system memory. 


The graphics data pages are also allocated in system memory. These pages are not required to be write-back 
cacheable and may be write-combinable. 


Extended SMRAM Address Range 


An extended SMRAM space of up to TOM - 1 MB can be defined using the TSEG_SIZE register. If a greater 
value is written to the TSEG_SIZE register, it is silently limited so as to leave 1MB of non-SMRAM x86 space 
memory. The Extended SMRAM uses the SDRAM above X86TOP and below TOM. Accesses by the 
TM8000 CPU to the Extended SMRAM space are not allowed when the processor is not in SMM mode. 
Accesses by the AGP and HT buses to the Extended SMRAM space are never allowed. 


HT Bus and AGP Bus Memory Mapped I/O Address Ranges 


Accesses to the MMIO address ranges are normally routed to the HT bus. The exceptions to this are the 
address ranges related to AGP. The AGP graphics aperture address range is specified by the APBASE and 
APSIZE registers. Accesses to addresses in this range are mapped to addresses in system SDRAM. The 
AGP graphics controller MMIO registers address range is specified in the AGP bridge MBASE and MLIMIT 
registers. The AGP graphics controller Local Frame Buffer address range is specified in the AGP bridge 
PMBASE and PMLIMIT registers. 


APIC Configuration Space 


This address range FECO_0000h to FECO_OFFFh is the default address range reserved for the APIC 
configuration space that includes the I/O APIC configuration space. The default Local APIC configuration 
space is FEEO_0000h to FEEO_OFFFh. Both the Local and I/O APIC addresses can be relocated to other 
addresses in the MMIO address range. 


CPU data accesses to the Local APIC configuration space do not result in external bus activity since the 
Local APIC configuration space is internal to the processor. CPU instruction fetches in this range are ignored 
by the Local APIC and are routed to the HT bus since no device can be mapped to overlap the Local APIC 
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3.1.3 


3.1.4 


address range. An MTRR must be programmed to make the Local APIC configuration range uncacheable 
(UC). The Local APIC base address should be relocated to the address range the I/O APIC is mapped into; 
FECO_0000h to FECF_FFFFh is the default range for the I/O APIC, so that one MTRR can be programmed 
to 64 KB for the Local and I/O APICs. The I/O APIC usually resides in the southbridge chip and is mapped to 
the address range FECO_0000h to FECO_OFFFh. Accesses to this range are routed to the HT bus so they 
can be sent to the I/O APIC. The AGP bus does not support having an I/O APIC located on it. 


High SMRAM Address Range 


The High SMRAM space allows write-back cacheable SMRAM support. The accesses to this space are 
routed to SDRAM in the range A0000h to BFFFFh. The SMM software can access the VGA video buffer by 
using the address range A0000h to BFFFFh. These accesses are routed to the AGP bus or the HT bus as 
discussed in Compatibility Area on page 21. 


High BIOS Area 


The top 2 MB of the Extended Memory Region is reserved for High System BIOS and extended BIOS for PCI 
devices. The TM8000 processor starts executing x86 instructions from the High BIOS after system reset. This 
is discussed in greater detail in Chapter 10, Startup and Reset. 


AGP Memory Address Range 


The TM8000 VNB can be programmed to direct memory mapped I/O accesses to the AGP bus interface 
when the MMIO addresses are within either of two ranges specified via configuration registers in the TM8000 
VNB Device #1 which is the AGP bridge. The first range is controlled via the Memory Base Register 
(MBASE) and the Memory Limit Register (MLIMIT). These registers are used to define non-prefetchable 
MMIO address range for the AGP graphics controller registers. The second range is controlled via the 
Prefetchable Memory Base Register (PMBASE) and the Prefetchable Memory Limit Register (PMLIMIT). 
These registers are used to define prefetchable MMIO address range for the AGP graphics controller Local 
Frame Buffer memory. 


The TM8000 VNB positively decodes memory accesses to the AGP memory address space as defined by 
the following equations: 


Memory_Base_Address <= Address <= Memory_Limit_Address 


Prefetchable_Memory_Base_Address <= Address <= Prefetchable_Memory_Limit_Address 


The effective size of the range is programmed by the plug-and-play configuration as it does the bus and 
device enumeration operations based on the results of reading the AGP graphics controller Base Address 
configuration registers to get the size of these two ranges. These ranges are programmed to be above the 
TOM register value and below the APIC configuration address ranges. 


AGP SDRAM Graphics Aperture 


Memory-mapped graphics data structures can reside in a graphics aperture. The graphics aperture is located 
in the MMIO address space above TOM. The graphics address remapping table (GART) hardware in the 
Virtual Northbridge is used to remap the contiguous physical addresses in the graphics aperture to physical 
page addresses in system memory. The GART consists of a 64 entry directory in hardware which points to 
page tables in system memory. These page tables form the Graphics Address Translation Table (GATT). The 
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3.1.5 


3.2 


GATT page tables must be in write-back cacheable memory. The page tables point to the physical pages in 
system memory that contain the graphics data. The GATT maps the addresses in the graphics aperture to the 
appropriate address in a page of system memory. The ATTPAGE register is used to program the directory 
entries. The GATT page table entries are programmed by x86 software by writing directly to system memory 
where the page tables are allocated. A graphics translation look-aside buffer (GTLB) is provided in the Virtual 
Northbridge hardware to improve the translation performance. The system memory pages mapped to through 
the graphics aperture have their cacheability attributes set by MTRR and PAT settings associated with the 
pages as they are allocated. They may have any cacheability with write combining (WC) the most common. 


The graphics aperture is located in the MMIO address range specified by the APBASE and APSIZE 
configuration register in the TM8000 host bridge Device 0, Function 0. The BIOS programs the graphics 
aperture address range during system configuration. The TM8000 VNB supports graphics aperture sizes of 
32 MB, 64 MB, 128 MB and 256 MB, with the default size being 64 MB. The APSIZE register must be 
programmed before the APBASE register configuration sequence is done. The APSIZE register controls the 
size returned when the APBASE register is written with all one's and then read back. 


System Management Mode (SMM) Memory 
Range 


The TM8000 VNB supports the use of the main system SDRAM memory as System Management RAM 
(SMRAM) enabling the use of System Management Mode (SMM). The TM8000 VNB supports two SMRAM 
options: Compatible SMRAM (C_SMRAM) and Extended SMRAM (E_SMRAM). SMRAM space provides a 
memory area that is available for the System Management Interrupt (SMI) handler's code and data storage. 
The SMRAM is normally hidden from the operating system so the TM8000 processor has immediate access 
to this memory space upon entry to SMM. 


The TM8000 VNB provides three SMRAM options: 


* Below 1 MB option that supports compatible SMI handlers in the Compatible A region located from 
A0000h to BFFFFh. 


* Above 1 MB option that allows new SMI handlers to execute with write-back cacheable SMRAM in the 
High H region. The H region is located at the 128 KB range above HSEG_BASE. The SMRAM accesses 
in this region are routed to SDRAM at addresses A0000h to BFFFFh. 


* Optional larger write-back cacheable Extended T region that can range in size from 128 KB to 1 MB in 
increments of 128 KB. This SMRAM region is located from TOM - TSEG_SIZE to TOM. 


Only uncacheable SMM regions may overlap HT or AGP device mappings. Non-SMM software does not 
access HT or AGP memory behind cacheable SMM regions. SMM regions may not overlap the AGP graphics 
aperture. HT and AGP masters cannot access the SMM space. 


Also see Chapter 9, System Management Mode (SMM), on page 155. 


Memory Shadowing 


The areas of the compatible memory area controlled by the PAB registers (see Programmable Memory 
Attribute Registers on page 63) can be shadowed into SDRAM. The PAB register control for a particular 
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3.3 


3.4 


3.5 


segment is configured to allow reads to be routed to the HT bus or LPC bus as appropriate. The write bits are 
set to allow writes to be routed to the SDRAM. The x86 software then reads the addresses in the region being 
shadowed to read the ROM location and then writes the address to write the value just read into the SDRAM 
at the same address. 


Once the ROM has been shadowed the read enable bit in the PAB register for the region being shadowed is 
set to route reads to SDRAM and write enable bit is cleared to route writes to the ROM via the HT or LPC bus 
where it has no effect. This makes the shadowed ROM code read-only in SDRAM. 


I/O Address Space 


The TM8000 VNB supports the 64 KB + 3 I/O address space of the x86 instruction set. The TM8000 VNB 
handles the I/O instructions to the three TM8000 VNB control register addresses documented in //O Mapped 
Registers on page 48. All other I/O addresses are routed to either the AGP bus or the HT bus. 


AGP |/O Address Mapping 


The TM8000 VNB forwards I/O address accesses to the AGP bus when the address is within the AGP I/O 
address range. This range is controlled by the I/O Base Address (IOBASE) and I/O Limit Address (IOLIMIT) 
registers in the TM8000 VNB Device #1 AGP bridge configuration space. The TM8000 VNB positively 
decodes I/O accesses to the AGP I/O address space as defined by the following equation: 


1/O_Base_Address <= CPU I/O Address <= |/O_Limit_Address 


The effective size of the AGP I/O range is determined by the plug-and-play bus and device enumeration 
software during system configuration. The I/O range size is determined from the size returned for the AGP 
graphics controller device base address configuration register if it requires an I/O address range. The 
configuration software then programs the base address register to an appropriate I/O location and programs 
the AGP bridge lOBASE and IOLIMIT register to match the I/O range programmed into the AGP graphics 
controller. 


Decode Rules and Cross-Bridge 
Address Mapping 


The address map described above applies globally to accesses arriving on any of the three interfaces; 
TM8000 CPU, HT bus or AGP bus. 
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3.5.2 


3.9.3 


HT Interface Decode Rules 


The TM8000 VNB accepts accesses from devices attached to the HT bus or from devices attached to the PCI 
or LPC bus through bridges to the HT bus. Accesses to the following address ranges are accepted: 


* All memory read and write accesses to the SDRAM. 


* Memory Write accesses to AGP memory ranges defined by MBASE/MLIMIT or PMBASE/PMLIMIT. The 
TM8000 VNB does not respond to memory read accesses to these ranges. 


* Memory read/write accesses to the graphics aperture defined by APBASE and APSIZE. 


HT accesses to other addresses in the memory address map are not accepted by the TM8000 VNB. 


AGP Interface Decode Rules 


Cycles Initiated Using PCI Protocol 


Accesses between AGP and HT are limited to memory writes using the PCI protocol. Write cycles are 
forwarded to HT if the addresses are not within the main SDRAM range, the AGP memory ranges, or the 
graphics aperture range. 


The TM8000 VNB claims AGP initiated memory read transactions decoded to the main SDRAM range or the 
graphics aperture range. All other memory read requests are master-aborted by the AGP initiator as a 
consequence of TM8000 VNB not responding to the transaction. 


If the AGP graphics controller issues an I/O, PCI configuration or PCI special cycle transaction, the TM8000 
VNB does not respond and the cycle results in a master-abort. 


Cycles Initiated Using AGP Protocol 


All cycles must reference main memory or the graphics aperture and are snooped by the Virtual Northbridge. 
If a cycle is outside the main memory range or the graphics aperture range then it terminates as follows: 


. Reads return a random value 


« Writes are dropped. 


Legacy VGA Ranges 


The legacy VGA memory range A0000h to BFFFFh is mapped either to the HT bus or to the AGP bus 
depending on the programming of the VGA_EN bit in the BCTRL register in the AGP bridge and the MDAP 
bit in the NBCFG register. The same bits control the routing of VGA I/O address ranges. If the VGA_EN bit is 
set then VGA legacy memory and I/O addresses are routed to AGP. If it is clear then the addresses are 
routed to the HT bus to be forwarded to a VGA device on the PCI or ISA bus. If the MDAP bit is set then there 
is amonochrome display adapter in the system and the memory addresses in the range BOOOOh to B7FFFh 
and the I/O addresses 3B4h, 3B5h and 3B8h to 3BBh are routed to the HT bus to be forwarded to the MDA 
card. 
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The VGA I/O range is defined as addresses where A[9:0] are in the ranges 3BOh to 3BBh and 3COh to 3DFh. 
The address bits A[15:10] are not decoded and alias to the low ten bits of the address range. The following 
table shows the routing of legacy VGA memory and I/O addresses. 


Legacy VGA Address Routing 


VGA_EN | MDAP AGP bus HT bus 
0 X Memory: None Memory: AOOOOh-BFFFFh 
1/0: None I/O: 3B0h—3BBh and 3COh-3DFh 
1 0 Memory: A0000h to BFFFFh Memory: None 
I/O: 3B0h to 3BBh and 3COh to 3DFh I/O: None 
1 1 Memory: AOOOOh-AFFFFh and Memory: BOOOOh-B7FFFh 
B8000h—BFFFFh 
1/0: 3B0h-3B3h, 3B6h, 3B7h and I/O: 3B4h, 3B5h and 3B8h-3BBh 
3COh-3DFh 


Machine Check Registers 


Astro processors support a set of global control and status registers and several error-reporting register 
banks. Each error-reporting bank is associated with a specific hardware unit (or group of hardware units) 
within the processor. The RDMSR and WRMSR instructions are used to read and write these registers. 

In some cases, the machine-check handler cannot be invoked due to an error, the error-reporting registers 
retain their values through a warm reset. (A warm reset is a reset that occurs while the processor is powered 
up, as opposed to a cold reset, which occurs during power-up.) This allows BIOS or other system-boot 
software to recover and report information associated with the error. 

Capability and Global-status registers include: 

* — Machine Check Global Capabilities Register (MCG_CAP). 

* — Machine Check Global Status Register (MCG_STATUS). 


Four error-reporting register banks, each containing the following registers, where n indicates the bank 
number: 


«  Machine-check control register (MCn_CTL). 

*  Machine-check status register (MCn_STATUS). 

* — Machine-check address register (MCn_ADDR). 

*  Machine-check miscellaneous error-information register (MCn_MISC). 


Each error-reporting register bank is associated with a specific processor unit. 
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4.1 


4.1.1 


Chapter 4 


Memory 


SDRAM Interface 


The integrated northbridge in the TM8000 processor has an SDRAM memory interface that supports Double 
Data Rate (DDR) SDRAM chips. The memory interface has an interface to the Serial Presence Detect (SPD) 
ROMs on the DIMM modules installed in the four DIMM slots. The TM8000 VNB performs the memory 
configuration for DIMM modules that have SPD ROMs and for soldered down SDRAM memory chips that 
have a memory definition entry in the OEM configuration table. 


The following sections discuss the memory interface and configuration in greater detail. 


DRAM Organization and Configuration 


The TM8000 Virtual Northbridge contains the Memory Interface (MI) unit that supports both DDR-I and DDR- 
Il SDRAM chips at clock speeds up to 200 MHz. The MI supports two memory DIMM slots if non-registered 
DIMM modules are used and four memory DIMM slots if registered DIMM modules are used, as shown in 
Figure 3 on page 32. Memory slots can contain soldered down SDRAM chips, DIMM modules in DIMM 
sockets, SO-DIMM modules in SO-DIMM sockets, or may be left empty. The interface to the memory slots 
contain 72 data bits if Error Checking and Correcting (ECC) memory DIMM modules are used or 64 data bits 
if non-ECC memory DIMM modules are used. The MI unit supports SDRAM chips with a data width of x4, x8, 
x16, or x32. The x4 data width is only supported for registered DIMM modules. The number of SDRAM chips 
required per DIMM side is the number needed to create the 64 or 72 bit data path based on the data width per 
SDRAM chip. 


Figure 3 below shows a non-ECC memory configuration with four x16 chips soldered down in slot 0, eight x8 
chips per side of the DIMM in slot 1 and two x32 chips per side of the DIMM in slot 2. Slot 3 is shown empty. 
Each slot can support single sided or double sided DIMM modules. This is only representational of possible 
memory configurations not a typical memory configuration. Memory may be placed in any of the four slots in 
any arrangement that is desired. Slots can be left empty and the slots do not have to be filled contiguously. 
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DIMM Slot Configuration 


x16 chips 


TM8000 


x6 chips 


232 chips 


4.1.2 Memory Interface Configuration 


The memory interface unit must be properly configured to interface to the SDRAM memory in each DIMM 
slot, whether soldered down on the main system board or on DIMM modules. The configuration parameters 
include the SDRAM memory type, the size of the DIMM module and the SDRAM chips on the module, the 
SDRAM data width, the error checking support, the various SDRAM timing parameters, the addressing of 
physical and logical banks, and the number of rows and columns on the SDRAM chips. The memory 
equations can become very complex, so the TM8000 VNB handles the memory interface configuration 
details. 


The TM8000 VNB provides a separate SDRAM controller configuration function for each of the four DIMM 
slots supported in a TM8000 system. These are functions 1-4 in Device 0 which is the host bridge for the 
system. (See SDRAM Memory Controller Registers (Device 0, Function 1-4) on page 91.) These four 
functions correspond to the four DIMM slots. 


The TM8000 boot code uses the SPD bus in the memory interface to detect the presence of the SPD ROMs 
contained on any DIMM modules installed in the four DIMM slots. The TM8000 boot code checks the OEM 
configuration table for any memory definition entries for soldered down SDRAM chips or for DIMM modules 
that do not have SPD ROMs. Using the memory configuration parameters from the SPD ROMs or the OEM 
configuration table the TM8000 boot code configures the memory interface unit for the installed SDRAM 
memory in the system. 


The TM8000 boot code first configures enough memory for the amount of Code Morphing software memory 
specified in the OEM configuration table. Two parameters control the amount of Code Morphing software 
memory that is configured. The CMSMAX parameter controls the maximum amount of memory that can be 
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configured for Code Morphing software use. The second parameter is the CMSMEM parameter which 
controls the amount of memory that is actually used by Code Morphing software and must be less than or 
equal to CMSMAX. After the Code Morphing software memory is configured, the TM8000 boot code 
decompresses Code Morphing software from the system ROM and stores it in the Code Morphing software 
memory. The Device 0 and Device configuration space is allocated in the Code Morphing software memory. 
The CMSMEM and CMSMAX parameters are stored in the configuration registers in Function 0 of Device 0. 
(See CMSMEM on page 60 and CMSMAX on page 60.) 


The remaining memory is configured for use by x86 software. For each SPD ROM detected on DIMM 
modules, the contents of the SPD ROM are read into the Code Morphing software memory and the first 64 
bytes of the data, which contain the memory configuration parameters, are stored in the corresponding 
Function of Device 0. For memory that has a memory definition entry in the OEM configuration table instead 
of an SPD ROM, the memory parameters are converted into the SPD ROM data parameter format and are 
stored in the corresponding Function in Device 0. 


Once the first 64 bytes of the SPD ROM data has been placed in the appropriate functions in the Device 0 
configuration registers, the memory configuration parameters must be VERIFIED and COMMITTED before 
they become active. The TM8000 boot code and the TM8000 VNB handle the verification and commit of all 
the memory that is detected with SPD ROMs or with OEM configuration table memory definition entries. As 
each memory module is committed, the Top of Memory (TOM) value is adjusted to reflect the committed 
memory. (See TOM on page 59.) The TOM register defines how much x86 memory is installed in the system 
and is used by the BIOS and the operating system. The DIMM SIZE register value is updated to reflect the 
memory module size for each committed module. 


The BIOS does not need to do anything for memory configuration if all of the memory is on DIMM modules 
that have SPD ROMs or is in memory modules that have memory definition entries in the OEM configuration 
table. If the system has memory that does not meet either of these criteria then the BIOS memory auto-sizing 
code is expected to find this memory. The BIOS uses the SD_CTRL register to VERIFY and COMMIT this 
memory. 


4.1.3 Memory-Type Range Registers 


The TM8000 supports UC (uncacheable), WC (write-combining), and WB (write-back) memory, page-level 
cacheability via the PCD/PWT/PAT bits and the PAT MSR (see below), and 8 variable memory-type range 
registers (MTRRs). 


The TM8000 does not support the WT (write-through) or WP (write-protect) memory types, mapping both 
instead to WB (write-back). WT is not in use by standard software, and WP is only used for ROM areas, for 
which the PABs provide redundant information (see Memory Accesses below). 


It is important to note that the PAB bits and TOM (northbridge controls) override the MTRRs (CPU controls). 
For more information about PAB and TOM, see Programmable Memory Attribute Registers on page 63 and 
Top of Memory Register on page 59, respectively. 
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Mapping Physical Memory with MTRRs 


The following diagram shows a map of physical address ranges that can be mapped using MTRRs. 


Table 4: Physical Memory Map with MTRRs 


Physical Memory 
FFFF_FFFFh 
Address ranges not mapped 
by an MTRR are set to a 
default type (UC) 
8 variable ranges, from 
4k to maximum size of 
physical memory 
0010_0000h 
OOOF_FFFFh 
64 fixed ranges, 4k each 256 k-bytes 
000C_0000h 
000B_FFFFh 
16 fixed ranges, 16k each 256 k-bytes ~ 
0008 _0000h 
OOOF_FFFFh 
8 fixed ranges, 64k each 512 k-bytes 
0000_0000h 
PAT Support 


The Page Attribute Table (PAT) extends the x86 architecture’s page-table format to allow memory types to be 
assigned to regions of physical memory based on linear address mappings. The PAT is a companion feature 
to the MTRRs; that is, the MTRRs allow mapping of memory types to regions of the physical address space, 
where the PAT allows mapping of memory types to pages within the linear address space. The MTRRs are 
useful for statically describing memory types for physical ranges, and are typically set up by the system BIOS. 
The PAT extends the functions of the PCD and PWT bits in page tables to allow all five of the memory types 
that can be assigned with the MTRRs (plus one additional memory type) to also be assigned dynamically to 
pages of the linear address space. 


PAT support is indicated by a CPUID bit (see register EDX, bit 16, in CPU/D Function 0000 0001h on 
page 125) and controlled by an MSR (see PAT Control Register on page 144). 
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Memory Accesses 


Any access that is mapped to peripheral space is automatically non-cacheable. Thus, for example, if an 
address is above TOM, it is automatically non-cacheable, and as such can only be treated as either UC 
(uncacheable) or WC (write-combining), but never WB (write-back). 


Similarly, if the PAB bits specify that an address range in the legacy region is mapped to peripherals for 
reads, then reads of those addresses are never cached, no matter what the MTRRs (fixed, variable, or 
default) specify. 


In other words, with the exception of the choice between UC and WC, the MTRRs apply only to "normal 
memory", and never to memory-mapped devices. 


Important: Unlike other x86-compatible processors, the contiguous normal memory range all the way 
through TOM need not be covered by variable MTRRs. Merely setting the default type to WB suffices to make 
normal memory cacheable and memory-mapped devices remain non-cacheable. The 8 variable MTRRs can 
be used to override some portion of normal memory, or to make some device-mapped addresses write- 
combining. 


The BIOS should set the default MTRR to write-back as soon as possible after reset. 


SMRAM Regions 


The SMRAM address space regions (A, T, and H segments) can and should be made cacheable. There is no 
incoherence to avoid, and performance is higher when they are cached. 


Base and Mask Calculations 


The base and mask values entered into the variable-range MTRR pairs are 24-bit values that the processor 
extends to 36 bits. 


For example, to enter a base address of 2 MB (200000h) to the MTRR_PHYSBASEO register, the 12 least 
significant bits are truncated and the value 000200h is entered into the PhysBase field. 


The same operation must be performed on mask values. For example, to map the address range from 
200000h to 3FFFFFh (2 MB to 4 MB), a mask value of FFFEO0000h is required. The 12 least-significant bits 
of this mask value are truncated, so that the value entered in the PhysMask field of the MTRR_PHYSMASKO 
register is FFFEOOh. This mask is chosen so that when any address in the 200000h to 3FFFFFh range is 
ANDed with the mask value, it returns the same value as when the base address is ANDed with the mask 
value (which is 200000h). 


Example Base and Mask Calculations 


Assume that the system has an 8-MByte graphics card is mapped to write-combining memory (WC) 
beginning at address A000 0000h. 


IA32_ MTRR_PHYSBASEO = 0000 0000 AOOO 0001H 
IA32_ MTRR_PHYSMASKO = 0000 OOOF FF80 0800H 
Caches A0000000-A0800000 as WC type. 
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4.2 


4.3 


Physical and Logical Layout 


The memory interface (MI) unit can support up to 4 GB of SDRAM memory. The MI supports single sided or 
double sided DIMM modules. Each DIMM can contain one physical bank per side for a maximum of two 
physical banks. The MI is designed to driver up to 8 SDRAM chips at a time. When non-registered DIMM 
modules are used, the address lines must drive all the SDRAM chips so this limits the number of modules that 
may be installed and the number of chips on each module. When registered DIMM modules are used, the 
register provides added drive strength to drive the addresses on each SDRAM chip and so the register only 
counts as one load on the MI unit. This allows up to four double sided registered DIMM modules to be 
installed in the system. Each DIMM module must have enough SDRAM chips to form either the non-ECC 
data width of 64 bits or the ECC data width of 72 bits. The DIMM module must be a registered module for 
SDRAM chips with a data width of x4 which requires 16 or 18 chips to form the DIMM module data width. 


The SDRAM chips are divided into four logical banks with a row and column addressing that depends on the 
size of the SDRAM chip. The MI unit can support SDRAM chips with 7 to 12 rows per chip. The MI supports 
an open-bank policy which allows two logical banks to be open at a time. This speeds up data transfers since 
the rows in the open banks do not have to be pre-charged before they are accessible. 


SDRAM ECC Support 


When an Astro system has ECC SDRAM memory installed the memory interface (MI) can detect and correct 
single-bit errors and can detect multi-bit errors. 


There are several aspects of Error Checking and Correction, defined here. 


«  Detection—the determination by the Memory Interface that the data returned from the memory contains 
an error, as indicated by comparing the checking code accompanying the data with one calculated by the 
memory interface controller. The error is also characterized as either single bit (SBE) or multi-bit (MBE). 


« — Reporting—storing of an error indicator, along with supporting information, in locations accessible by x86 
software. In the absence of signalling (see next), system software can detect the occurrence of errors by 
polling this information. 


* — Signalling—dynamic notification to the system of the occurrence of an error either at the time of 
detection, or when a previously reported error becomes enabled for signalling. 


* Correction — the use of the checking code to fix an error and deliver good data to the requestor. This 
applies only to single bit errors. 


* — Scrubbing — writing of the corrected data back to memory. This can reduce the probability of correctable 
errors deteriorating into uncorrectable errors. This applies only to single bit errors. 


Some of the behavior of the ECC facility differs between errors occurring in the memory used for x86 code 
and data and memory used for cms code and data; the details are described below for the two spaces 
separately. 
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Global Control 


All ECC facilities are completely disabled, at the hardware level, by a bit in the VNB. This bit defaults to the 
enabled state, and once written to the disabled state, can not be re-written to enabled. When disabled, none 
of the facilities described below exist; for simplicity's sake, the effect of this global control is implicit in the 
following descriptions. 


Code Morphing Software (CMS) and x86 memory space behavior with respect to ECC is described below 


(individual behavior types are described on the previous page): 


Behavior CMS Space x86 Space 

Reporting The setting of error indicator flags and The setting of error indicator flags and 
supporting (i.e., address) information is supporting (i.e., address) information is 
enabled when NBCFG[DDIM] in the VNB is | enabled when NBCFG[DDIM] in the VNB is 
non-zero. non-zero. 

* SBE error reported via ERRSTS[SBE]. |* SBE error reported via ERRSTS[SBE]. 
Address in SBE_ADDR. Address in SBE_ADDR. 

« MBE error reported via « MBE error reported via 
ERRSTS[MBE]. Address in ERRSTS[MBE]. Address in 
MBE_ADDR. MBE_ADDR. 

Signalling Signalling is only performed if errors are Signalling is only performed if errors are 
reported; that is, in addition to the following | reported; that is, in addition to the following 
control, signalling is disabled when control, signalling is disabled when 
NBCFG[DDIM] is set to zero. NBCFGI[DDIM] is set to zero. 

* SBE is signalled by asserting SERR#if |* SBE signalled by asserting SERR# if 
CMD[SERRE] and ERRCMD[SBE]. CMD[SERRE] and ERRCMD[SBE]. 

* MBE is signalled by asserting SERR# |* MBE signalled by asserting SERR# if 
if CMD[SERRE] and ERRCMD[MBE]. CMD[SERRE] and ERRCMD[MBE]. 

Correction SBEs are always corrected. SBEs are corrected if in ECC mode (i-e., 

NBCFGJ[DDIM] is set to 10b or 11b). 

Scrubbing The corrected data from an SBE in CMS The corrected data from an SBE in x86 

space is always written back to memory. space is written back to memory only if 
NBCFG[DDIM] is set to 11b. 

Other Action An MBE in CMS space is always a fatal An MBE in x86 space triggers a machine 

error, independent of any controls. check exception. 


If a multi-bit ECC error is detected in CMS space, a fatal error response will result. This response is 
independent of all controls, except the NBCFG[ECCP] bit. 


If a multi-bit ECC error is detected in x86 space, and the DDIM field in the NBCFG register is set to either 
"ECC Mode (Error Checking and Correction)" or "ECC Mode with scrubbing,” then the Multi-bit ECC Error bit 
in the ERRSTS register in Function 0 of Device 0 will be set. If error signaling is enabled (the Multi-bit ECC bit 
in the ERRCMD register and the SERRE bit in the CMD register are set), then an error will be signaled. When 
the x86 software receives the signal it will read the ERRSTS register to see if the signaled event is the multi- 
bit ECC error. 


x86 software can read the MBE_ADDR register in Function 0 of Device 0 to get the address in main memory 
where the multi-bit ECC error was detected. The number of multi-bit errors that have occurred since the last 
multi-bit error was signaled is also available. The x86 software clears the Multi-bit ECC Error bit in the 
ERRSTS register by writing a one to the bit. This also causes the error count to be cleared in the MBE_ADDR 
register. 


If a single-bit ECC error is detected, and the DDIM field in the NBCFG register is set to either "ECC Mode 
(Error Checking and Correction)" or "ECC Mode with Scrubbing," then the Single-bit ECC Error bit in the 
ERRSTS register in Function 0 of Device 0 will be set. If error signaling is enabled (the Single-bit ECC bit in 
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the ERRCMD register and the SERRE bit in the CMD register are set) then an error will be signaled. When 
the x86 software receives the signal it will read the ERRSTS register to see if the signaled event is the single- 
bit ECC error. The x86 software can read the SBE_ADDR register in Function 0 of Device 0 to get the 
address in main memory where the single-bit ECC error was detected. The number of single-bit errors that 
have occurred since the last single-bit error was signaled is also available. The x86 software clears the 
Single-bit ECC Error bit in the ERRSTS register by writing a one to the bit. This also causes the error count to 
be cleared in the SBE_ADDR register. 


If a single bit error is detected in memory used for x86 space, and the DDIM field is set to either "ECC Mode" 
or "ECC Mode with Scrubbing," the data will be corrected in-flight to its requestor. If DDIM is set to "ECC 
Mode with Scrubbing," the corrected data will also be written back to memory. 


If a single bit error is detected in memory used for CMS space, the data will be corrected in-flight to its 
requestor, and the corrected data will be written back to memory, independent of the DDIM control. 


The First ECC Error Address bit in the ERRCMD register controls whether the ECC Error Address in both the 
MBE_ADDR and SBE_ADDR registers are sticky or not. If the First ECC Error Address bit is set, then only 
the first address is stored in either the MBE_ADDR or SBE_ADDR registers when multi-bit or single-bit errors 
(respectively) occur. If the First ECC Error Address bit is cleared, then the address field in these registers is 
updated each time a corresponding ECC error occurs. 


For reference, the ERRCMD register is described in Error Command Register on page 73 and the ERRSTS 
register is described in Error Status Register on page 75. The SBE_ADDR register is described in Single-Bit 
ECC Error Address Register on page 72 and the MBE_ADDR register is described in Multi-Bit ECC Error 
Address Register on page 73. 


SPD ROM Interface 


The TM8000 memory controller has support for access to the Serial Presence Detect (SPD) ROM on each 
DIMM installed in the four available DIMM slots. The TM8000 boot code and the TM8000 Code Morphing 
software code controls the SPD bus to read the SPD ROM data. The memory DIMM modules used in a 
TM8000 system are expected to have Serial Presence Detect ROMs on the DIMM module. For memory that 
is soldered to the main system board the OEM is expected to put the appropriate memory type, sizing, and 
timing information in the OEM configuration table in the system ROM. 


The TM8000 boot code or the TM8000 Code Morphing software code reads the SPD ROM data and places 
the first 64 bytes from each of the SPD ROMs on installed DIMM modules in the corresponding Device 0, 
Function 1-4 configuration registers 0x50 to Ox8F. The TM8000 boot code or the TM8000 Code Morphing 
software code converts the memory data in the OEM configuration table to the appropriate SPD ROM data 
and place this data in the corresponding Device 0, Function 1-4 configuration registers (see HT Bridge 
Registers (Device 0, Function 0) on page 51). The memory in DIMM modules with SPD ROMs or with an 
OEM configuration table entry is committed before the first x86 instruction is executed by the processor. The 
VNB_CONFIG bit in the SD_STS register is set for any memory configured and committed by the TM8000 
VNB. The SPD_CONFIG or OEM_CONFIG bits define whether the memory configuration data came from an 
SPD ROM or from an OEM configuration table memory definition entry. 


The BIOS can read the SPD ROM data from the DIMM module in the DIMM slot corresponding to Device 0, 
Function 1-4 using the SPD_ADDR and SPD_DATA registers described in SPD ROM Address Register on 
page 94 and SPD ROM Data Register on page 94, respectively. The first 64 bytes of the SPD ROM is already 
in the configuration registers of the function corresponding to the DIMM slot containing the SPD ROM to be 
read. The first byte in the SPD ROM specifies how many bytes have been programmed in the SPD ROM. The 
remaining bytes up to byte 255 can be read from the SPD ROM by the BIOS a dword at a time. The dword 
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offset in the SPD ROM is placed in the SPD_ADDR register and the dword data in the SPD ROM is read by 
doing a read of the SPD_DATA configuration register. 


The address of each SPD ROM on the bus can be specified in the OEM Configuration Table. The default 
addresses are 50h, 51h, 52h and 53h for DIMM slots 0, 1, 2 and 3, respectively. An address value of 00h in 
the OEM Configuration Table is used to indicate that no SPD ROM should be probed for that DIMM slot. 
(Documentation for the OEM Configuration Table is in the CMS Configuration Guide, which has not yet been 
released.) 


SPD ROM Data 


The SPD ROM data contains three data sections, DIMM module and SDRAM sizing and timing data, 

manufacturer specific data, and optional OEM specific data. The DIMM sizing and timing data is in the first 64 
bytes of the ROM. The manufacturer specific data is in the next 64 bytes of the ROM. The OEM specific data, 
if present, is in the last 128 bytes of the ROM. The maximum supported size for the SPD ROM is 256 bytes. 


The TM8000 boot code or TM8000 Code Morphing software code reads the first 64 bytes of each SPD ROM 
on the DIMM modules installed in the DIMM slots into the configuration registers for Device 0, Function 1-4 
corresponding to the DIMM slot. The configuration register layout matches the SPD ROM data layout defined 
in the Dual Data Rate (DDR) SDRAM for SPD revision 0 (02/01) for the first 64 bytes of the ROM. 


The bytes from 64 to 255 can be read from or written to an SPD ROM using the SPD_ADDR and SPD_DATA 
registers in the Device 0, Function 1-4 corresponding to the DIMM containing the SPD ROM to be accessed. 
The SPD ROM data is read as a doubleword addressed by the ROM offset stored in the SPD_ADDR register 
prior to reading the SPD_DATA configuration register. SPD ROM data is written corresponding to the bytes 
written to SPD_DATA within the doubleword addressed by the ROM offset stored in the SPD_ADDR register 
prior to writing the SPD_DATA configuration register. 


External Behavior 


Code Morphing software reports OxFF for the first 40h bytes in each device of its PCI configuration space. 
The result of this is that Windows and other type utilities do not recognize that this function exists, because 
they read offset 0 in the PCI configuration space and look for a value other than OxFF. 


Thus, Windows does not recognize the SDRAM controller function, and it does not load a driver or indicate its 
existence in the Device Manager. This is helpful, since otherwise the Device Manager would report all four 
SDRAM controllers and potentially confuse people since they may only have one SODIMM slot. Users may 
try to remove the duplicates and cause Windows problems. 


The good news is that DOS and some Windows based PCI Viewers/Editors allow programmers to manually 
select the Bus, Device, and Function of the PCI device to view. These utilities still show the contents beyond 
40h in PCI configuration space where the useful data resides regarding the memory interface programming, 
SPD values used, etc. BIOS can also read and write this area, since it has no restrictions. 


In other words, developers with a view into the PCI space are able to see the relevant details of memory 
configuration, but end users are not able to see their memory devices with utilities like the Device Manager. 
Transmeta highly recommends describing this behavior in external documentation so that end users are not 
confused. 
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Chapter 5 


Power Management 


Power Management Support 


LongRun™ Power Management 


The TM5500/TM5800 incorporates LongRun, an advanced processor power management technology. 
LongRun utilizes adaptive voltage and clock scaling to match the processor performance and energy 
consumption levels to the required workload. 


LongRun is enabled using the CPUID instruction. For more information, see CPU/D Transmeta-Specific 
Functions on page 132. LongRun is configured using the LONGRUN model-specific register (MSR). For more 
information, see LongRun™ Control and Status Register on page 150. 


ACPI 2.0 Support 


The TM5500/TM5800 supports ACPI-compliant power management modes. The following table lists the 
recommended state of the processor for each of the ACPI global system states. The states are described in 
Processor Power States on page 43. 


Power Management System States 


TM5500/TM5800 DDR, SDR 
ACPI System State State SDRAM Clock Generator 
GO0/CO: Working Normal Normal Running 
G0/C1: Working/Auto Halt Normal/ Normal Running 
AutoHalt 
G0/C2: Working/Quick Start Normal/ Normal/ Running 
Quick Start Self refresh 
G1/S1/C1: — Sleeping/Auto Halt Auto Halt Normal Running 
G1/S1/C2: Sleeping/Quick Start Quick Start Self refresh Running 
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Table 5: Power Management System States (Continued) 


TM5500/TM5800 DDR, SDR 
ACPI System State State SDRAM Clock Generator 
G1/S1/C3: Sleeping/Deep Sleep Deep Sleep Self refresh CLKIN stopped 
G1/S3: Sleeping/Suspend to RAM Off Self refresh All clocks stopped 
G1/S4: Sleeping/Suspend to disk Off Off Off 
G2/S5: Soft off Off Off Off 
G3: Mechanical off Off Off Off 


5.1.3 Suspend Resume Support 


This section will describe the suspend resume support in a future revision of this document. 


5.1.4 Clock Control Support 


This section will describe the clock control support in a future revision of this document. 


5.1.5 SDRAM Power Down Mode 


This section will describe the SDRAM power down mode support in a future revision of this document of this 
document. 


5.1.6 Deep Sleep Extensions (DSX) Support 


This section will describe DSX support in a future revision of this document. 


5.1.7 Latencies 


This section will discuss important latencies, including the PLL relock latency, in a future revision of this 
document. 


42 Transmeta Proprietary Information Provided Under Nondisclosure Agreement TeA NSME TA ‘“o 


TM8000 Programming and Configuration Guide 


August 19, 2003 


PRELIMINARY INFORMATION Part 2: BIOS Programming 


SUBJECT TO CHANGE Power Management 


5.2 Processor Power States 


The TM8000 supports the following processor power-saving states: 


Table 6: Processor Power States 


State 


ACPI Power State 


Description 


Auto Halt 


C1 


Auto Halt is normally initiated via execution of the HLT 
instruction. 


Quick Start 
Throttling 


C2 


Quick Start Throttling is achieved by periodic assertion and 
deassertion of the STPCLK# signal. Throttling is normally 
configured through the southbridge. 


The TM5500/TM5800 supports asynchronous throttling events, 
such as throttling in response to a thermal event. 


There are no northbridge registers immediately affected by this 
power state. 


Quick Start 


C2 


Quick Start is initiated upon assertion of the STPCLK# signal. 
This is normally accomplished by issuing a command to the 
southbridge. 


The SMAF register needs to be set appropriately for this state.. 
See State Transitions below. 


Deep Sleep 


C3 


Deep Sleep is initiated upon assertion of the STPCLK# signal, 
followed by assertion of the LDT_STOP# signal. Host clocks 
can be stopped in the Deep Sleep state (except if 
PM_CR2_OPT.C3_DIS_CLOCK_GATE is set). 


It is recommended that the PCI arbiter be disabled before 
entering Deep Sleep and re-enabled afterwards, to preserve 
memory system coherency. 


The SMAF register needs to be set appropriately for this state.. 
See State Transitions below. 


Suspend to RAM 


$3 


Suspend to RAM (STR) cuts off power from most of the system 
components except DRAM. We recommend that you disable 
the PCI arbiter before entering STR. The sequence for initiating 
STR is complex and can vary from system to system. The final 
power state transition is normally triggered by a software 
command to the southbridge. 


The SMAF register needs to be set appropriately for this state.. 
See State Transitions below. 


Power On 
Suspend 


$1 


Power On Suspend is initiated upon assertion of the STPCLK# 
signal, followed by assertion of the SLP# signal. Host clocks 
and the PCI clock are usually stopped in the Power On 
Suspend state. It is recommended that you disable the PCI 
arbiter before entering Power On Suspend. The final power- 
state transition is normally triggered by a software command to 
the southbridge. 


The SMAF register needs to be set appropriately for this state.. 
See State Transitions below. 
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9.3 


State Transitions 


Power management for the Transmeta processor and virtual northbridge is unique with respect to power state 
transitions. Most chipsets initiate power state transitions using only the southbridge. The northbridge and 
processor are usually ignorant of the finer details of power management. The TM8000 provides superior 
power management by increasing processor and northbridge awareness of power state transitions using the 
System Management Action Field (SMAF) indicated in the Hypertransport bus specifiction. 


For more information on state transitions utilizing SMAF, see System Management Action Field (SMAF) 
Support on page 45. 


State Preservation 


The Transmeta VNB preserves its state during the ACPI S1-S2 system sleep modes, and specifically during 
Suspend to RAM (STR). That is, upon resume from STR, the BIOS (or OS) is not required to restore the 
registers (or state) of the Transmeta VNB, because they automatically reflect the state before the STR. The 
important exception to this policy is the Programmable Memory Attribute Registers (“PAB bits”), which are not 
preserved and must be restored after S1, S3, or STR. 


Power Management Registers 


Power management is controlled by the following VNB registers, all in Device 0, Function 0 (the HT bridge 
configuration space). Also shown is one register in the I/O space. See the corresponding page for 
implementation details. 


See 
Register Location Description Pg 
PM_CR2 value of ACPI Power Management Control Register—Used to 48 


PM_CR2_ADDR | disable the AGP arbiter to prevent any external bus 
masters from acquiring the AGP bus. 


PM_CR2_ADDR_ | 78-79h ACPI Power Management Control Address Register— | 69 
The address of the PM_CR2 register in |/O memory space. 
Relocation of the PM_CR2 register is allowed to promote 
compability among other power management controller 
core logic components. 


PM_CR 7Ah ACPI Power Management Control Register—Power 70 
management control settings, including: 
PM_CR2_EN Arbiter control enable/disable 
NREF_EN Normal refresh enable/disable 
QS_MODE Quick-start mode (always on) 
AGP_DIS AGP disable 
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Register Location Description Pg 
PM_CR2_OPT 7Bh ACPI Power Management Control Options Register— | 70 


Power management control options, including: 
PM_CR2_FORWARD Arbiter control forwarding 
C3_DIS_CLOCK_GATE | Disable aggresive C3 


clock gating 
C2_EN_PSM Memory in PSM during C2 
PSM_EN Power Saving Mode enable 
SMAFD 7C-7Fh STPCLK System Management Action Field Definition 71 


Register—SMAF mapping. For details, see System 
Management Action Field (SMAF) Support on page 45, 
below. 


5.4 System Management Action Field 
(SMAF) Support 


System Management Action Field (SMAF) support is part of the Hypertransport bus specification’. In short, 
SMAF is part of a STPCLK system message that differentiates among the various reasons why STPCLK is 
asserted. Potential message include the following: 


SMAF Field 

Value (hex) | Function Description 

00 Thermal Throttling (hardware-initiated STPCLK throttling in response to thermal event) 

01 ACPI Throttling (initiated by write to ACP! P_CNT register) 

02 ACPI C2 (initiated by read of ACPI P_LVL2 register) 

03 ACPI C3 

04 ACPI C4 

05-6 Reserved 

07 Hypertransport (HT) Link Width/Frequency Change 

08 ACPI $1 

09 Reserved 

OA ACPI S3 

0B ACPI S4/S5 

0C-0E Reserved 

OF HT_RESERVED (a SMAF value defined as HT_RESERVED is one that has been reserved 
for use by the HyperTransport specification) 


SMAF is programmable in both the northbridge and the southbridge, though it is critical that both programs 
match each other. The recommended SMAF mapping is the default mapping: FB1A 8732h 


1. See http://;www.hypertransport.org 
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9.0 LongRun™ Advanced Thermal 
Management 


Thermal management on the TM8000 is controlled by a LongRun™ Advanced Thermal Management, which 
works in conjunction with LongRun™ to vary the processor’s speed and voltage use in order to optimize for 
thermal issues, performance, and battery longevity. 


The VNB register LR_ATM (Device 0, Function 0, offset E8h; see LongRun Advanced Thermal Management 
Register on page 90) controls the properties of LongRun Advanced Thermal Management2. 


Thermal issues will be discussed in further detail in a future revision of this document. 


2. While this interface is identical to that in previous Transmeta microprocessors, the underlying 
technology has been improved, providing more performance for a given power level. 
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Virtual Northbridge 
Configuration 


The Astro TM8000 processor contains two sets of configuration registers accessible by software via the host 
CPU |/O address space: I/O-mapped registers and PCI configuration registers. I/O mapped registers provide 
access to the PCI configuration registers. Both sets of registers are accessible only by the host processor— 
they cannot be accessed by PCI bus masters. 


Register Classifications 


The registers can be accessed as byte, word or dword quantities unless otherwise specified. As required by 
the PCI Revision 2.1 specification, all multiple-byte numeric fields use /ittle-endian ordering (the least 
significant bit corresponds to the lowest address). Registers are classified as either read-only, read/write, 
read/write clear, read-after-write-once, or reserved, as defined in the following table: 


PCI Register Access Classifications 


Access Classification | Symbol | Read Effect Write Effect 

Read-only RO Reads contents of register. | None. 

Read/write RW Reads contents of register. | Writes data to register. 

Read/write clear RWC Reads contents of register. | Write of 1 sets the corresponding bit to 
zero. Write of 0 has no effect. 

Read after write-once RWO Reads contents of register. | Write of non-zero value can only be 
changed by CPU RESET (i.e. not init). 

Reserved -- Always returns 0. None. 


The TM8000 contains address locations in the PCI configuration space that are reserved. The TM8000 
responds to these addresses by completing the cycle and returning a value of 0. Software should not write to 
reserved configuration registers in the device-specific address region (above offset 3Fh). Note that some RW 
registers have reserved bits that are labelled RO. 


Some of the PCI configuration registers listed contain reserved bits. Software should not modify or rely on the 
value of reserved bits. 
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Bus Identification 


HT in this chapter refers to the HyperTransport Bus, which serves as the primary I/O bus for the TM8000. For 
more details, see HyperTransport Bus Interface on page 14. 


AGP in this chapter refers to the Accelerated Graphics Port, which serves as the primary graphics bus for the 
TM8000. For more details, see AGP Bus Interface on page 15. 


LPC in this chapter refers to the LPC bus. See LPC Bus Interface on page 15. 


6.1 I/O Mapped Registers 


The TM8000 Virtual Northbridge provides two I/O-mapped registers that in turn provide access to all other 
PCI configuration registers: the Configuration Address Register (CONFADDR) and the Configuration Data 
Register (CONFDATA). A third I/O mapped register (PM_CR2) is used to disable PCI bus master activity 
prior to entering a CPU stop clock states with non-coherent system memory accesses. 


The I/O addresses and bit definitions for these registers are listed in the following sections. 


Table 8: /O Mapped Register Summary 


Register 
Register Description Name 1/0 Location Size Access | Default Value | Pg 
ACPI Power Management Control Register | PM_CR2 value of 8 Bits | RW 00h 48 
PM_CR2_ADDR 
Configuration Address Register CONFADDR | OCF8h 32 Bits | RW 0000 0000h 49 
Configuration Data Register CONFDATA | OCFCh 32 Bits | RW 0000 0000h 50 


pm_cr2 ACPI Power Management Control Register 


value of 
PM_CR2_ADDR_ The PM_CR2 register is used to disable the AGP arbiter to prevent any external bus masters from acquiring 
the AGP bus. Any currently running PCI cycles terminate properly. 


Register Name /O Location Size Access Default Value 

PM_CR2 value of PM_CR2_ADDR 8 Bits RW 00h 

Bit(s) | Name Access _ | Function Description 

7:1 -- RW Reserved. 

0 ARB_DIS | RW Arbiter Disable—When this bit is set to 1, the northbridge's AGP Arbiter 
does not respond to any PCI REQ# signals going active until this bit is 
set back to 0. Only external AGP requests are masked from the arbiters. 


Accesses to this register are controlled by the power management control registers: 


* PM_CR2_ADDR (offset 78-79h): This register specifies the address where the PM_CR2 register is 
mapped into I/O space. It defaults to 00h. 
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* PM_CR.PM_CR2_EN (offset 7Ah, bit 6): 


0: 
1: 


* PM_CR2_OPT.PM_CR2_FORWARD (offset 7Bh, bit 6): The TM8000 VNB supports forwarding of all 


I/O accesses to location PM_CR2 are forwarded to the HT bus. 


/O accesses to location PM_CR2 go to the ACPI Register. 


PM_CR2 register accesses to the HT bus, which allows other system components, such as the 
Southbridge, to snoop them (e.g., the ALI M1535 requires this): 


0: 
1: 


The following table illustrates the setting of PM_CR2_ADDR and PM_CR2_OPT.PM_CR2_FORWARD for 


I/O accesses to PM_CR2 are handled internally. 


I/O accesses to PM_CR2 also appear on the HT bus. 


two supported southbridge chips (contact your Transmeta representative for information on supported 
southbridge parts): 


Southbridge 


PM_CR2_ADDR 


PM_CR2_OPT.PM_CR2_FORWARD 


ALI 1563 


ACPI_BASE + 0030h 


1 


Nvidia CK8 


ACPI_BASE + 001Ch 


1 


The following table illustrates the effect of PM_CR.PM_CR2_EN and PM_CR2_OPT.PM_CR2_FORWARD 
on accesses to PM_CR2: 


PM_CR2_OPT. PM_CR2 access at PCI bus cycle at 
PM_CR.PM_CR2_EN PM_CR2_FORWARD PM_CR2_ADDR PM_CR2_ADDR 
0 0 no yes 
0 1 no yes 
1 0 yes no 
1 1 yes yes 


CONFADDR 
OCF8h 


Configuration Address Register 


CONFADDR is a 32 bit register accessed only when referenced as a DWord. A Byte or Word reference 
"passes through" the Configuration Address Register onto the PCI bus as an I/O cycle. The CONFADDR 
register contains the Bus Number, Device Number, Function Number, and Register Number for which a 
subsequent configuration access is intended. Note that this register accepts DWORD writes only. 


Register Name 


V/O Location Size 


Access 


Default Value 


CONFADDR 


OCF8h 


32 Bits 


RW (DWORD only) 


0000 0000h 


Bit(s) 


Name 


Access 


Function Description 


31 


CFGE 


RW 


Configuration Enable—If set (1), PCI configuration space access is 
enabled. If clear (0), configuration space access is disabled. 


30:24 


RW Reserved 
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Bit(s) | Name | Access | Function Description 


23:16 | BUS RW Bus Number—When the bus number is 00h, the target of the configuration 
cycle is the TM8000 or the HT local bus connected directly to the TM8000, 
depending on on the DEV field (see below). If the bus number is 00h and the 
target is not the TM8000 itself, the TM8000 generates a type 0 configuration 
cycle on the HT bus. If the bus number is non-zero, the TM8000 generates a 
type 1 configuration cycle and the bus number is mapped to AD(23:16) during 
the address phase of the PCI cycle. 


15:11. | DEV RW Device Number—This field specifies a specific device on the PCI bus. This 
field is mapped to AD[15:11], as all HT devices know their device numbers. 


The TM8000 virtual northbridge responds to device number 0 for the host-to- 
HT bridge device, and to device number 1 for the HT-to-AGP bridge device. 


10:8 FUNC | RW Function Number—This field specifies a specific function within the device 
specified by the bus number and device number. This field is mapped directly 
to AD(10:8) during PCI configuration cycles to allow configuration registers of 
a particular function in a multiple-function device to be accessed. 


The TM8000 only responds to configuration cycles with a function number of 
000b to 100b for device 0, or function 000b for device 1. All other function 
number values where bus is 0 and device is 0 or 1 generate a master abort. 


7:2 REG RW Register Number—This field specifies a specific register within the function 
specified by the bus number, device number and function number as 
specified by other CONFADDR fields described in this table. This field is 
mapped directly to AD(7:2) during PCI configuration cycles. 


1:0 -- RW Reserved 


conrpataA Configuration Data Register 
OCFCh 


CONFDATA is a 32 bit read/write window into configuration space. The portion of configuration space that is 
referenced by CONFDATA is determined by the contents of CONFADDR. 


Register Name VO Location Size Access Default Value 

CONFDATA OCFCh 32 Bits RW 0000 0000h 

Bit(s) | Name | Access | Function Description 

31:0 CDW | RW Configuration Data—lf bit 31 of CONFADDR is 1, any I/O reference that falls 
in the CONFDATA I/O space is mapped to configuration space using the 
contents of CONFADDR. 


6.2 PCI Configuration Registers 


The TM8000 virtual northbridge contains a block of PCI configuration registers that provide access to the 
TM8000’s configuration space header (addresses 00h to 3Fh) and to TM8000-specific configuration functions 
(above 3Fh). The following sections list the PCI configuration address assignments and descriptions for these 
registers. The following registers are available to configure: 


« HT Bridge Registers (Device 0, Function 0) on page 51 
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* SDRAM Memory Controller Registers (Device 0, Function 1-4) on page 91 


* AGP Host Bridge Configuration Registers (Device 1) on page 113 


6.2.1 


HT Bridge Registers (Device 0, Function 0) 


Host-to-PCl Bridge Registers are summarized in the following table in order by PCI address space offset. 


Table 9: PCI Host-to-HT Bridge Registers (Dev 0, Fn 0) Summary 

Description Register Name Address | Size Access | Default Value | Pg 
Vendor Identification Register VID 00-01h 16 Bits RO 1279h 53 
Device Identification Register DID 02-03h 16 Bits RO 0060h 53 
Command Register CMD 04-05h 16 Bits RO/RW_ | 0000h 54 
Status Register STS 06-07h 16 Bits RO 0010h 54 
Revision Identification Register RID 08h 8 Bits RO 00h 55 
Programming Interface Register PI 09h 8 Bits RO 00h 55 
Sub-Class Code Register SUBC OAh 8 Bits RO 00h 55 
Base Class Code Register BCC OBh 8 Bits RO 06h 56 
Cache Line Size Register CLS 0Ch 8 Bits RO 00h 56 
Master Latency Timer Register MLT ODh 8 Bits RO 00h 56 
Header Type Register HDR OEh 8 Bits RO 80h 56 
Built-In Self Test Register BIST OFh 8 Bits RO 00h 57 
Aperture Base Address Register APBASE 10-13h 32 Bits RW, RO | 0000 0008h 57 
Reserved 14-2Bh 

Subsystem Vendor Identification Register | SVID 2C-2Dh 16 Bits RWO 0000 0000h 58 
Subsystem Identification Register SID 2E-2Fh 16 Bits RWO 0000 0000h 58 
Reserved 30-33h 

Capabilities Pointer Register CAPPTR 34h 8 Bits RO AOh/D8h 58 
Reserved 35-47h 

Code Morphing Software Minimum Size CMSMIN 48-49h 16 Bits RO OEM-specified | 59 
Register value 

Top of Memory Register TOM 4A-4Bh 16 Bits RO Depends on 59 

memory 
capacity 

Code Morphing Software Memory Size CMSMEM 4C-4Dh 16 Bits RW OEM-specified | 60 
Register value 

Code Morphing Software Maximum CMSMAX 4E-4Fh 16 Bits RO OEM-specified | 60 
Memory Register value 

NB Configuration Register NBCFG 50-53h 32 Bits RW 0000 0000h 60 
Reserved 54-57h 

Legacy Region Noncompat Control NC_LEGACY 58h 8 Bits RW 20h 62 
Programmable Memory Attribute Registers | PABO—PAB6 59-5Fh 8 Bits RW 00h 63 
Noncompat Memory Mapped IO Base 0 NC_MMIO_BASEO | 60-61h 16 Bits RW 0010h 64 
Noncompat Memory Mapped IO Limit 0 NC_MMIO_LIMITO | 62-63h 16 Bits RW 0000h 64 
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Table 9: PCI Host-to-HT Bridge Registers (Dev 0, Fn 0) Summary (Continued) 

Description Register Name Address | Size Access | Default Value | Pg 
Noncompat Memory Mapped IO Base 1 NC_MMIO_BASE1 | 64-65h 16 Bits RW 0010h 64 
Noncompat Memory Mapped IO Limit 1 NC_MMIO_LIMIT1 | 66-67h 16 Bits RW 0000h 65 
Noncompat IO Bitmap 0 NC_IOIO_BITMAPO | 68-6Bh 32 Bits RW 0000 0000h 65 
Noncompat IO Bitmap 1 NC_IOIO_BITMAP1 | 6C-6Fh 32 Bits RW 0000 0000h 66 
Reserved 70-71h 

System Management RAM Control SM_RAM_CR 72h 8 Bits RO, RW | 02h 66 
Register 

Extended SMM RAM Control Register ESM_RAM_CR 73h 8 Bits RW 3Fh 67 
TSEG Size Register TSEG_SIZE 74-75h 16 Bits RO, RW | 0002h 68 
HSEG Base Register HSEG_BASE 76-77h 16 Bits RO, RW | FEEAh 69 
ACPI Power Management Control Address | PM_CR2_ADDR 78-79h 16 Bits RW 0022h 69 
Register 

Power Management Control Register PM_CR 7Ah 8 Bits RW and | 18h 70 

RO 

ACPI Power Management Control Options | PM_CR2_OPT 7Bh 8 Bits RW 00h 70 
Register 

STPCLK System Management Action Field | SMAFD 7C-7Fh 32 Bits RW FB1A 8732h 71 
Definition Register 

Single-Bit ECC Error Address Register SBE_ADDR 80-83h 32 Bits RO 0000 0000h 72 
Multi-Bit ECC Error Address Register MBE_ADDR 84-87h 32 Bits RO 0000 0000h 73 
Reserved 88-8Fh 

Error Command Register ERRCMD 90h 8 Bits RW 80h 73 
Error Status Register ERRSTS 91-92h 16 Bits RWC 0000h 75 
Reserved 93h 

Upper ROM Size Register UP_ROM_SZ 94-95h 16 Bits RW 0100h 76 
Lower ROM Size Register LOW_ROM_SZ 96-97h 8 Bits RW 0100h 76 
Forbidden ROM Size Register ROM_FRBDN 98-99h 16 Bits RW 0000h 77 
Protected ROM Size Register ROM_PRTCTD 9A-9Bh 16 Bits RW 0000h 77 
Reserved 9D-9Fh 

AGP Capability Identifier Register AGPCAPID AOh 8 Bits RO 02h or 00h 78 
AGP Next Capability Pointer Register AGPNEXTCAP Ath 8 Bits RO D8h or 00h 78 
AGP Version Register AGPVER A2h 8 Bits RO 20h or 00h 78 
AGP Status Register AGPSTAT A4h-A7h_ | 32 Bits RO OFO00_0203h 79 
AGP Command Register AGPCMD A8h-ABh | 32 Bits RW, RO | 0000 0000h 79 
Reserved AC-AFh 

AGP Control Register AGPCTRL BO-B3h 32 Bits RW 0000 0080h 81 
Aperture Size Register APSIZE B4h 8 Bits RW 30h 81 
Reserved B5-B7h 

Aperture Translation Table Page Register | ATTPAGE B8-BBh 32 Bits RW 0000 0000h 82 
(AGP Mode Only) 

Reserved BC-BFh 

OEM upgrade 
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Table 9: PCI Host-to-HT Bridge Registers (Dev 0, Fn 0) Summary (Continued) 
Description Register Name Address | Size Access | Default Value | Pg 
OEM Option Data Registers OEMOPTO C8-CBh_ | 32 Bits RW OEM-defined 83 
OEM Option Data Registers OEMOPT1 CC-CFh | 32 Bits RW OEM-defined 83 
BIOS Scratch Pad Registers BSPADO DO-D3h_ | 32 Bits RW 0000 0000h 84 
BIOS Scratch Pad Registers BSPAD1 D4-D7h | 32 Bits RW 0000 0000h 84 
HT Capability Identifier Register HTCAP D8h 8 Bits RO 08h 84 
HT Next Capability Pointer Register HTNEXTCAP D9h 8 Bits RO 00h 85 
HT Command Register HTCMD DA-DBh_ | 16 Bits RW, RO | 200th 85 
HT Link Control Register HTCTRL DC-DDh | 16 Bits RW, RO | 0020h 86 
HT Link Configuration Register HTCFG DE-DFh | 16 Bits RO 0000h 87 
HT Revision ID Register HTREV EOh 8 Bits RO 22h 88 
HT Frequency Register HTFREQ Eth 8 Bits RO 00h 88 
HT Frequency Capabilities Register HTFREQCAP E2-E3h 16 Bits RO 0005h 89 
HT Feature Capability Register HTFEAT E4-E5h 16 Bits RO 0O00Ah 89 
HT Link Frequency/Voltage Change HTFVCHG E6h 8 Bits R/W 00h 90 
Register 
Reserved E6-E7h 
LongRun Advanced Thermal Management | LR_ATM E8h 8 Bits RW 01h 90 
Register 
LongRun Thermal Agility Register LR_ATM80 E9h 8 Bits RW 00h 91 
Reserved EA-FFh 
vio Vendor Identification Register 
00-01h 
, The VID register contains the vendor identification number. This register, in combination with the DID register, 
Device 0 : : : 
P uniquely identifies the TM8000. 
Function 0 
Register Name Addr Offset Size Access Default Value 
VID 00-01h 16 Bits RO 1279h 
Bit(s) |Name | Access | Function Description 
15:0 VID RO Vendor Identification Number—This 16-bit value is the PCI vendor 
identification number assigned to Transmeta. Transmeta VID = 1279h. 
pip Device Identification Register 
02-03h 
: The DID register contains the device identification number. This 16-bit register, in combination with the VID 
Device 0 : : : es 
Function 0 register, uniquely identifies the TM8000. 


Register Name 


Addr Offset 


Size 


Access 


Default Value 


DID 


02-03h 


16 Bits 


RO 


0060h 
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CMD 
04-05h 


Device 0 
Function 0 


STS 
06-07h 


Device 0 
Function 0 


Bit(s) 


Name 


Access 


Function Description 


15:0 


DID 


RO 


Device Identification Number—This 16-bit value is the identification 
number assigned to the host-to-HT bus bridge. 


Transmeta host-to-HT bridge = 0060h 


Command Register 


PCI command register. 


Register Name | Addr Offset Size Access Default Value 
CMD 04-05h 16 Bits RO/RW 0000h 

Bit(s) | Name Access _ | Function Description 

15:10 | -- RO Reserved 

9 FB2BC RO Fast Back-to-Back—Hardwired to 0. 

8 SERRE | RW SERR# Enable—0O. Set to 1 to enable SERR#. 

7 ADSTEP | RO Address/Data Stepping—Hardwired to 0. 

6 PERRE |RO Parity Error Enable—Hardwired to 0. 

5 VPS RO Video Palette Snooping—Hardwired to 0. 

4 MWIE RO Memory Write and Invalidate Enable—Hardwired to 0. 
3 SCE RO Special Cycle Enable—Hardwired to 0. 

2 BME RO Bus Master Enable—Hardwired to 0. 

i MSE RO Memory Space Enable—Hardwired to 0. 

0 IOSE RO I/O Space Enable—Hardwired to 0. 


Status Register 


PCI status register. This register is not meaningful for device 0, function 0 other than the Capabilities List bit. 
Note that the Capabilities List bit (4) is always 1 to indicate the presence of AGP and HT capability blocks on 
the capabilities linked list. 


Register Name | Addr Offset Size Access Default Value 
STS 06-07h 16 Bits RO 0010h 

Bit(s) | Name Access _ | Function Description 

15 DPE RO Detected Parity Error—Hardwired to 0. 

14 SSE RO Signalled System Error—Hardwired to 0. 

13 RMAS RO Received Master Abort Status—Hardwired to 0. 
12 RTAS RO Received Target Abort Status—Hardwired to 0. 
11 STAS RO Signalled Target Abort Status—Hardwired to 0. 
10:9 DEVT RO DEVSEL# Timing—Hardwired to 0. 

8 DPD RO Data Parity Detected—Hardwired to 0. 

7 FB2BS RO Fast Back-to-Back—Hardwired to 0. 

6 UDF RO User Defined Format—Hardwired to 0. 
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RID 
08h 


Device 0 
Function 0 


PI 
09h 


Device 0 
Function 0 


SUBC 
OAh 


Device 0 
Function 0 


Bit(s) | Name Access _ | Function Description 

5 66C RO 66MHz PCI Capable—Hardwired to 0. 
4 CL RO Capabilities List—Hardwired to 1. 
3:0 -- RO Reserved 


Revision Identification Register 


The RID register contains the TM8000 host-to-HT bridge revision identification number. 


Register Name Addr Offset Size Access Default Value 

RID 08h 8 Bits RO 00h 

Bit(s) | Name | Access Function Description 

7:0 RID RO Revision Identification Number This 8-bit value is the revision 


identification number assigned to the TM8000 host-to-HT bridge. 


Programming Interface Register 


The PI register always returns 0 for the host-to-HT bridge class code, indicating that no special programming 
interface definition exists for this function. 


Register Name Addr Offset Size Access Default Value 

PI 09h 8 Bits RO 00h 

Bit(s) | Name Access _ | Function Description 

7:0 PGIF RO Programming Interface—This read-only field always returns 0, indicating 


that none of the function 0 subclasses have further division into 
programming interfaces. 


Sub-Class Code Register 


Sub-Class Code for the TM8000 VNB Device 0, Function 0. For more information, see PC/ Hardware and 
Software-Architecture and Design (4th ed.), by Edward Solari and George Willse, Annabooks, San Diego, 


1998, p.562. 

Register Name Addr Offset Size Access Default Value 

SUBC OAh 8 Bits RO 00h 

Bit(s) | Name Access _ | Function Description 

7:0 SUBC RO Sub-Class Code—This 8-bit value indicates the category type for the 


TM8000 host-to-HT bridge. 00h indicates a host bridge. 
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BCC 
OBh 


Device 0 
Function 0 


CLS 
OCh 


Device 0 
Function 0 


MLT 
ODh 


Device 0 
Function 0 


HDR 
OEh 


Device 0 
Function 0 


Base Class Code Register 


The BCC register contains the TM8000 device 0, function 0 base class code. 06h indicates a bridge device. 


Register Name Addr Offset Size Access Default Value 

BCC OBh 8 Bits RO 06h 

Bit(s) | Name Access _ | Function Description 

7:0 BASEC |RO Base Class Code—This 8-bit value indicates the base class code for the 


TM8000 PCI bridge. 06h indicates a bridge device. 


Cache Line Size Register 


Cache line size register. This register is not implemented in device 0, function 0. 


Register Name Addr Offset Size Access Default Value 
CLS OCh 8 Bits RO 00h 

Bit(s) | Name Access _| Function Description 

7:0 CLS RO Cache Line Size—Hardwired to 0. 


Master Latency Timer Register 


Master latency timer register. This register is not implemented in device 0, function 0. 


Register Name Addr Offset Size Access Default Value 
MLT ODh 8 Bits RO 00h 

Bit(s) | Name Access _| Function Description 

7:0 MLTC RO Master Latency Timer Count Value—Hardwired to 0. 


Header Type Register 


The HDR register defines the TM8000 device 0, function 0 configuration space header layout. 


Register Name Addr Offset Size Access Default Value 

HDR OEh 8 Bits RO 80h 

Bit(s) | Name Access_ | Function Description 

7 MFD RO Multi-Function Device—This bit returns 1, indicating that this device 
supports multiple functions. 

6:0 HEADT |RO Header Type—This value indicates the header type for the TM8000 PCI 
bridge. The default value 00h is always returned by reads to this register, 
indicating that the header conforms to header type 0. 
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BIST 
OFh 


Device 0 
Function 0 


APBASE 
10-13h 


Device 0 
Function 0 


Built-In Self Test Register 


Built-in self test register. The TM8000 VNB does not have a built-in self test. 


Register Name Addr Offset Size Access Default Value 
BIST OFh 8 Bits RO 00h 

Bit(s) | Name Access _ | Function Description 

7:0 -- RO Reserved—Hardwired to 0. 


Aperture Base Address Register 


The APBASE register is a PCI Base Address register. It is used to set the memory address for the starting 
address of the graphics aperture. Software determines the graphics aperture size by setting this register to 
1111 1111h. Bits 31:25 are set based on the graphics aperture size selected by the APSIZE register, which 
must have been written before the graphics aperture size is checked. After the graphics aperture size is 
determined, the base address of the graphics aperture is then written into bits 31:25. 


Note: Bit 9 of the NBCFG register (see NB Configuration Register on page 60) is used to prevent accesses to 
the graphics aperture before the APBASE register has been initialized to point at a properly configured 
graphics address remapping table (GART) structure. 


Default Value 
0000 0008h 


Access 
RW, RO 


Addr Offset 
10-13h 


Size 
32 Bits 


Register Name 
APBASE 


Bit(s) 
31:28 


Access 
RW 


Name Function Description 


Upper Programmable Base Address—The upper bits of the graphics 
aperture base address. 


27:25 RW Lower Programmable Base Address—These bits are either hardwired to 
zero or can be programmed depending on the APSIZE register setting as 


defined below: 
Bit 27 | Bit 26 


r/w r/w 


Bit 25 


r/w 


Aperture Size 
32 MB 
64 MB 


r/w 0 
r/w 0 0 128 MB 
0 0 0 256 MB 


Bits 27:25 are controlled by bits 5:3 of the APSIZE register. If APSIZE[5]=0 
then APBASE[27]=0 and if APSIZE[5]=1 then APBASE[27]=r/w. The same 
applies to APSIZE bits 4:3 and APBASE bits 26:25. 


The default value for APSIZE is 30h, i.e. a default graphics aperture size of 64 
MB. The value of APSIZE is programmed by the BIOS before the graphics 
aperture size and location are configured by the BIOS. The BIOS provides a 
user option allowing APSIZE to be set to one of the above values. 


24:4 -- RO Reserved—Set to 0. This forces a minimum aperture size of 32MB. 


Prefetchable—Hardwired to one indicating the graphics aperture is in 
prefetchable memory. 
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SVID 
2C-2Dh 


Device 0 
Function 0 


SID 
2E-2Fh 


Device 0 
Function 0 


CAPPTR 
34h 


Device 0 
Function 0 


Bit(s) | Name | Access | Function Description 

2:1 RO Type—Hardwired to zero to indicate the graphics aperture can be located 
anywhere in the 32 bit address space 

0 RO Memory Space Indicator—Hardwired to zero indicating the graphics 
aperture is a memory range. 


Subsystem Vendor Identification Register 


Subsystem Vendor Identification Register, to be set by the OEM Configuration Table or in BIOS. For more 
information about the OEM configuration table, see the Development and Manufacturing Guide. 


Register Name Addr Offset Size Access Default Value 

SVID 2C-2Dh 16 Bits rwo 0000h 

Bit(s) | Name | Access | Function Description 

15:0 SVID | rwo Subsystem Vendor ID—This value should be preset by either the OEM 


configuration table (recommended), or by the BIOS during boot-up. If preset 
by the OEM configuration table, the field is read-only. If preset by the BIOS, 
the field is writable only until a non-zero value is written to it, and is read-only 
afterward. 


Subsystem Identification Register 


Subsystem Identification Register, used to identify a particular subsystem. 


Register Name Addr Offset Size Access Default Value 

SID 2E-2Fh 16 Bits rwo 0000h 

Bit(s) | Name | Access | Function Description 

15:0 SID rwo Subsystem ID—This value should be preset by either the OEM configuration 


table (recommended), or by the BIOS during boot-up. If preset by the OEM 
configuration table, the field is read only. If preset by the BIOS, the field is 
writable only until a non-zero value is written to it, and is read-only afterward. 


For more information about the OEM configuration table, see the 
Development and Manufacturing Guide. 


Capabilities Pointer Register 


The TM8000 VNB device 0, function 0 supports a linked list of capabilities register blocks. If AGP is enabled, 
then the linked list contains the AGP capabilities register block, followed by the HTcapabilities register block. 
The CAPPTR register points to the AGP capabilities register block if AGP is enabled, or to the HT capabilities 
register block if AGP is disabled. 


Register Name 


Addr Offset 


Size Access Default Value 


CAPPTR 


34h 


8 Bits RO AOh/D8h 
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CMSMIN 
48-49h 


Device 0 
Function 0 


TOM 
4A-4Bh 


Device 0 
Function 0 


Bit(s) | Name 


Access _ | Function Description 


15:0 


RO Pointer to the start of capabilities linked list— 


PM_CR[1] is set to 0. 


PM_CR[1] is set to 1. 


D8h = This field points to the HT capability register block if the AGP_DIS bit 


AOh = This field points to the AGP capability register block if the AGP_DIS bit 


Code Morphing Software Minimum Size Register 


Minimum memory size for Code Morphing™ software. 


Register Name Addr Offset Size Access Default Value 

CMSMIN 48-49h 16 Bits RO OEM-specified value 

Bit(s) | Name | Access | Function Description 

15:4 RO Code Morhping Software Minimum Memory Size—These bits specify the 
minimum size allowed for Code Morphing software memory in MBytes. 

3:0 RO Reserved—Hardwired to 0, thus forcing an integral number of MB. 


Top of Memory Register 


The value of TOM is set by the TM8000 VNB based on the amount of memory installed in the system and the 
value of CMSMEM, which is initialized based on values specified by the OEM in the OEM configuration table. 


The value of TOM 
CMSMEM. Values 


is set after system reset to the size of the configured memory minus the value of 
in this register are aligned to a MByte boundary. 


This register is read-only and can only be changed by: 


* — changing the amount of installed SDRAM, 


* changing the OEM configuration table values that affect the initial value of CMSMEM, or 


* — writing a new value to CMSMEM 


Register Name Addr Offset Size Access Default Value 

TOM 4A-4Bh 16 Bits RO Depends on memory capacity 

Bit(s) Name | Access _ | Function Description 

15:4 TOM RO Top of Memory—These bits specify bits 31-16 of the top of the x86 
memory space, which is also the starting address of the memory allocated 
to Code Morphing Software. 

3:0 -- RO Reserved—Hardwired to 0, thus forcing an integral number of MB. 
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CMSMEM 
4C-4Dh 


Device 0 
Function 0 


CMSMAX 
4E-4Fh 


Device 0 
Function 0 


NBCFG 
50-53h 


Device 0 
Function 0 


Code Morphing Software Memory Size Register 


Code Morphing software memory size. 


Register Name Addr Offset Size Access Default Value 

CMSMEM 4C-4Dh 16 Bits RW OEM-specified value 

Bit(s) Name | Access _ | Function Description 

15:0 RW CMS Memory Size—These bits specify the CMS memory size in MBytes. 
See the description for the TOM register above. 

3:0 - RO Reserved—Hardwired to 0, thus forcing an integral number of MB. 


Code Morphing Software Maximum Memory Register 


Maximum Code Morphing software memory size. 


Register Name Addr Offset Size Access Default Value 

CMSMAX 4E-4Fh 16 Bits RO OEM-specified value 

Bit(s) Name | Access _ | Function Description 

15:0 RO Code Morphing Software Maximum Memory Size—These bits specify 
the maximum size allowed for Code Morphing Software memory in MBytes. 

3:0 RO Reserved—Hardwired to 0, thus forcing an integral number of MB. 


NB Configuration Register 


This 32 bit register allows control of accesses to the AGP graphics aperture, monochrome display adapter 
(MDA) address routing, and control of transactions between AGP and other devices located on the HT bus or 
on the PCI bus attached to an HT southbridge. 


Register Name Addr Offset Size Access Default Value 

NBCFG 50-53h 32 Bits RW 0000 0000h 

Bit(s) Name | Access _ | Function Description 

31:12 RO Reserved 

11 RW AGP to HT Access Enable—When PHLDA+# is active or there is an 


outstanding passive release transaction pending: 


1: AGP and HT device transactions are enabled 
0: AGP and HT device transactions are blocked (default) 


Note that when the Astro VNB’s AGP interface is disabled, as indicated by 
PM_CR[AGP_DIS] (i.e., bit 1 of register 7Ah) being set to ‘1,’ this bit will be 
read-only, with a value of ‘0.’ 


Note: The AGP to HT traffic must not target the LPC bus. 
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Bit(s) 


Name 


Access 


Function Description 


10 


RW 


HT Agent to Aperture Access Disable—This bit is used to prevent 
access to the graphics aperture from devices on the HT bus. If bit 9 (see 
below) is 1, bit 10 has the following effect on the graphics aperture: 


1: accesses to the aperture from the HT bus side are disabled 
0: accesses to the aperture from the HT bus side are enabled (default) 


RW 


Aperture Access Global Enable—This bit is used to prevent access to the 
graphics aperture from any port (CPU, HT, or AGP) before the aperture 
range is established by the configuration software and an appropriate 
translation table has been initialized. 


1: Enable. Note that this bit globally controls accesses to the aperture. 
Once enabled, bit 10 provides the next level of control for accesses 
originated from the HT bus. 


0: Disable. This bit must be set to 1 by the system software after the 
graphics aperture has been setup properly. (default) 


RO 


Reserved 


MDAP 


RW 


MDA Present—This bit is used to indicate the presence of a secondary 
monochrome adapter in the system. This bit works in conjunction with the 
VGA_EN bit in register 3E of the AGP bridge as follows: 


VGA_EN | MDAP | Description 


0 X All VGA cycles are sent to a secondary VGA 
graphics card rather than to the AGP bridge. 


1 0 All VGA cycles are sent to the AGP bridge 
(default). 


1 1 All VGA cycles are sent to the AGP bridge, 
except for cycles in the MDA range or aliased 
I/O ranges. 


The MDA ranges are a subset of the VGA ranges as follows: 
Memory: OBO0000h - OB7FFFh 
1/0: 3B4h, 3B5h, 3B8h, 3B9h, 3BAh, and 3BBh 


ECCP 


ECC Present—This is the global control over the ECC facility. 


1: ECC is present 
0: ECC is not present. None of the other ECC control or status exists. 


The default value is determined by the capabilities of the installed memory. 
This bit is RW, but can only be changed in the 1->0 direction (i.e., if ithas a 
default of 1, software can reset it to 0, but if the default is 0, or it has been 
previously reset by software, it cannot be set to 1). 


RPEID 


Response Packet Error Indicator Disable—This bit is used to disablethe 
reporting of uncorrectable ECC errors in DMA response packets on the HT 
link. Disabling the error indicator allows all memory read responses, 
independent of the presence of ECC errors, to be sent up to 16 cycles 
earlier than if errors are indicated. Note that all other reporting and 
signalling of uncorrectable ECC errors, including the raising of a machine 
check exception, is independent of the setting of this bit. 


0: Error reporting in read response packets is enabled (default). 
1: Error reporting in read response packets is disabled. 


This bit is read-only in current versions of Astro. 


RO 


Reserved 
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Bit(s) Name | Access _ | Function Description 
1:0 DDIM DRAM Data Integrity Mode—Defines and enables ECC support. This 
bitfield is encoded as follows: 
Value Definition 
00 No ECC support. Note that this is different from the 


global disable in that it does not disable the detection of 
errors in Code Morphing Software space, nor the 
associated actions (correction and scrubbing of SBEs, 
asserts on MBEs). 


01 Reserved, silently converted to 10b if written. 
10 ECC support enabled. 
11 ECC support enabled with scrubbing (writeback of 


corrected data to memory) 


This field must be set to a non-zero value to enable reporting. For more 
information, see SDRAM ECC Support on page 36. 


Nc_tEGAcy Legacy Region Noncompat Control 


58h 
5 This register is used to specify non-compatible (i.e., not ISA type) routing for |O and Memory Mapped IO 
Device 0 . P 
: accesses in the legacy address regions on the HyperTransport bus. 
Function 0 

Register Name Addr Offset Size Access Default Value 
NC_LEGACY 58h 8 Bits RW 20h 
Bit(s) Name Access _ | Function Description 
7:6 Reserved 
5 ISA_NONCMPT If set, enables NC_IOIO_BITMAPO and NC_IOIO_BITMAP1 to 


make IO accesses in the ISA range (i.e., those for which 
address bits 9:8 are not both 0) non-compatible. 


If clear, NC_IOIO_BITMAPO and NC_IOIO_BITMAP‘1 only 
affect accesses to the first 256 ports in each 1k range. 


4 MDA_NONCMPT If set, accesses to the MDA IO ports (address bits 9:0 in 3B4h, 
3B5h, 3B8h:3BAh, 3BFh) are non-compatible. If clear, they are 
compatible. 

3 VGA_NONCMPT If set, accesses to the VGA IO ports (address bits 9:0 in 
3BOh:3BBh, 3COh:3DFh) are non-compatible. If clear, they are 
compatible. 

2 MMIO_B8_BF If set, MMIO accesses in the range B_8000h:B_FFFFh are 
non-compatible. If clear, they are compatible. 

1 MMIO_BO_B7 If set, MMIO accesses in the range B_0000h:B_7FFFh are 
non-compatible. If clear, they are compatible. 

0 MMIO_AO_AF If set, MMIO accesses in the range A_0000h:A_FFFFh are 


non-compatible. If clear, they are compatible. 
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PAB[o:7] Programmable Memory Attribute Registers 


59h-5Fh 


Device 0 
Function 0 


Programmable memory attribute registers. Each PAB register controls the read and write accesses to two 
memory regions as shown. Each memory region can be made so that read or write accesses are either 


directed to SDRAM or to one of the device buses. Depending on the address being accessed, the accesses 
directed to the device buses could go to the TM8000 ROM controller bus, to the HT bus, or to the AGP bus. 
The default is to map all of the ranges so that after processor reset the read and write accesses are all 
directed to one of the device buses. 


Separate controls are provided for read accesses and write accesses for the 13 regions of memory 
controllable by the PAB registers. The bit definitions below define control mechanisms for each of the regions. 
The PAB bits allow the shadowing of BIOS ROMs to memory regions in SDRAM. 


Register | Addr Register Details Default 
Name Offset Bits Address _ | Size Range Size Access | Value 
PABO 59h 7:4 960 KB 64 KB FO000 - FFFFFh 8 Bits | RW 00h 
3:0 Reserved 
PAB1 5Ah 7:4 784 KB 16 KB C4000 - C7FFFh 
3:0 768 KB 16 KB C0000 - C3FFFh 
PAB2 5Bh 7:4 816 KB 16 KB CCO000 - CFFFh 
3:0 800 KB 16 KB C8000 - CBFFFh 
PAB3 5Ch 7:4 848 KB 16 KB D4000 - D7FFFh 
3:0 832 KB 16 KB DO0000 - D3FFFh 
PAB4 5Dh 7:4 880 KB 16 KB DCO000 - DFFFFh 
3:0 864 KB 16 KB D8000 - DBFFFh 
PAB5 5Eh 7:4 912 KB 16 KB E4000 - E7FFFh 
3:0 896 KB 16 KB E0000 - E3FFFh 
PAB6 5Fh 7:4 944 KB 16 KB ECO000 - EFFFFh 
3:0 928 KB 16 KB E8000 - EBFFFh 
Bit(s) | Name‘ Access _ | Function Description 
7 -- RO Reserved 
6 RW Non-Compat Region 1—f this bit is set, accesses to the specified 
address range that are routed to the HT bus are non-compat. If clear, the 
accesses are compat. Accesses not routed to the HT bus are unaffected 
by this bit. 
5 WE1_nn | RW Write Enable Region 1—If set, writes to the specified address range are 
directed to SDRAM. If clear, writes are directed to one of the device buses. 
4 RE1_nn | RW Read Enable Region 1—If set, reads from the specified address range 
are directed to SDRAM. If clear, reads are directed to one of the device 
buses. 
3:2 -- RO Reserved 
RW Non-Compat Region 0—If this bit is set, accesses to the specified 
address range that are routed to the HT bus are non-compat. If clear, the 
accesses are compat. Accesses not routed to the HT bus are unaffected 
by this bit. 
1 WEO_nn | RW Write Enable Region 0—If set, writes to the specified address range are 
directed to SDRAM. If clear, writes are directed to one of the device buses. 
0 REO_nn | RW Read Enable Region 0—If set, reads from the specified address range 
are directed to SDRAM. If clear, reads are directed to one of the device 
buses. 
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NC_MMIO_BASEO 
60-61h 


Device 0 
Function 0 


NC_MMIO_LIMITO 
62-63h 


Device 0 
Function 0 


NC_MMIO_BASE1 
64-65h 


Device 0 
Function 0 


1. mnn=bits 12-19 of the first address of the applicable address region. For example: 
PAB1(0) = REO_CO 
PAB2(4) = RE1_CC 
See the register name table above for corresponding memory regions. 


Noncompat Memory Mapped IO Base 0 


This register is used with NC_MMIO_LIMITO according to the following formula to define a region in which 
HyperTransport bus accesses are non-compatible (i.e., not ISA type). 


BASE_ADDR <= memory address <= LIMIT_ADDR 


Writes to this memory region are treated as posted. Note that there are two such regions; the other is defined 
by the registers NC_MMIO_BASE1 and NC_MMIO_LIMIT1. 


Register Name Addr Offset Size Access Default Value 

NC_MMIO_BASEO | 60-61h 16 Bits RW 0010h 

Bit(s) Name Access _ | Function Description 

15:4 BASE_ADDR | RW Defines the base address for MMIO non-compat accesses to the 
HyperTransport bus. 

3:0 - RO Reserved. (Hardwired to 0) 


Noncompat Memory Mapped IO Limit 0 


This register is used with NC_MMIO_BASEO according to the following formula to define a region in which 
HyperTransport bus accesses are non-compatible (i.e., not ISA type). 


BASE_ADDR <= memory address <= LIMIT_ADDR 


Writes to this memory region are treated as posted. Note that there are two such regions; the other is defined 
by the registers NC_MMIO_BASE1 and NC_MMIO_LIMIT1. 


Register Name Addr Offset Size Access Default Value 

NC_MMIO_LIMITO | 62-63h 16 Bits RW 0000h 

Bit(s) Name Access _ | Function Description 

15:4 LIMIT_ADDR | RW Defines the limit address for MMIO non-compat accesses to the 
HyperTransport bus. 

3:0 -- RO Reserved. (Hardwired to 0) 


Noncompat Memory Mapped IO Base 1 


This register is used with NC_MMIO_LIMIT1 according to the following formula to define a region in which 
HyperTransport bus accesses are non-compatible (i.e., not ISA type). 


BASE_ADDR <= memory address <= LIMIT_ADDR 
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NC_MMIO_LIMIT4 
66-67h 


Device 0 
Function 0 


NC_IOIO_BITMAPO 
68-6Bh 


Device 0 
Function 0 


Writes to this memory region are treated as posted. Note that there are two such regions; the other is defined 
by the registers NC_MMIO_BASE0O and NC_MMIO_LIMITO. 


Register Name Addr Offset Size Access Default Value 

NC_MMIO_BASE1 | 64-65h 16 Bits RW 0010h 

Bit(s) Name Access _ | Function Description 

15:4 BASE_ADDR | RW Defines the base address for MMIO non-compat accesses to the 
HyperTransport bus. 

3:0 -- RO Reserved. (Hardwired to 0) 


Noncompat Memory Mapped IO Limit 1 


This register is used with NC_MMIO_BASE‘1 according to the following formula to define a region in which 
HyperTransport bus accesses are non-compatible (i.e., not ISA type). 


BASE_ADDR <= memory address <= LIMIT_ADDR 


Writes to this memory region are treated as posted. Note that there are two such regions; the other is defined 
by the registers NC_MMIO_BASE0 and NC_MMIO_LIMITO. 


Register Name Addr Offset Size Access Default Value 

NC_MMIO_LIMIT1 | 66-67h 16 Bits RW 0000h 

Bit(s) Name Access _ | Function Description 

15:4 LIMIT_ADDR | RW Defines the limit address for MMIO non-compat accesses to the 
HyperTransport bus. 

3:0 -- RO Reserved. (Hardwired to 0) 


Noncompat IO Bitmap 0 


This register is used to specify non-compatible (i.e., not ISA type) routing for IO accesses on the 
HyperTransport bus, as follows. Each bit corresponds to a contiguous 1k block of |O ports in the range 
0000h:7FFFh, in which the bit number specifies bits 14:10 of the 1O port number. For example, bit 0 controls 
accesses to ports 0000h:03FFh, and bit 31 controls accesses to ports 7C00h:7FFFh. 


The non-compatible routing is overridden (i.e., made compatible) for the last 768 ports in each 1k range (i.e., 
those in which address bits 9:8 are not both 0) if the NC_LEGACY[ISA_NONCMPT] bit is 0. 


Register Name Addr Offset Size Access Default Value 

NC_IOIO_BITMAPO | 68-6Bh 32 Bits RW 0000 0000h 

Bit(s) Name | Access _ | Function Description 

31:0 RW Non-compat bits. If set, |O accesses to the corresponding ports are non- 
compatible. If clear (default), they are compatible. 
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NC_IOIO_BITMAP4 
6C-6Fh 


Device 0 
Function 0 


SM_RAM_CR 
72h 


Device 0 
Function 0 


Noncompat IO Bitmap 1 


This register is used to specify non-compatible (i.e., not ISA type) routing for |O accesses on the 
HyperTransport bus, as follows. Each bit corresponds to a contiguous 1k block of |O ports in the range 
8000h:1_0002h, in which the bit number specifies bits 14:10 of the 1O port number. For example, bit 0 
controls accesses to ports 8000h:83FFh, and bit 31 controls accesses to ports FCO00h:1_0002h. (Note that, 
because the total IO space is 64k+3, the final bitmap bit controls 1k+3 ports.) 


The non-compatible routing is overridden (i.e., made compatible) for the last 768 ports in each 1k range (i.e., 
those in which address bits 9:8 are not both 0) if the NC_LEGACY[ISA_NONCMPT] bit is 0. 


Register Name Addr Offset Size Access Default Value 

NC_IOIO_BITMAP1 | 6C-6Fh 32 Bits RW 0000 0000h 

Bit(s) Name | Access _ | Function Description 

31:0 RW Non-compat bits. If set, IO accesses to the corresponding ports are non- 
compatible. If clear (default), they are compatible. 


System Management RAM Control Register 


The SM_RAM_CR register controls how accesses to Compatibility and Extended SMRAM spaces are 
treated. The SM_OPEN and SM_LOCK bits function only when the GSM_RAM_EN bit is set to 1. The 
SM_OPEN bit must be reset before the SM_LOCK bit is set. 


Register Name Addr Offset Size Access Default Value 

SM_RAM_CR 72h 8 Bits RO, RW 02h 

Bit(s) | Name Access _| Function Description 

7 -- RO Reserved 

6 SM_OPEN RO, RW _ | SMM Space Open—When SM_LOCK is set to 0 and SM_OPEN is 
set to 1, SMM memory space is made visible even when SMM mode 
is not active. This is intended to help BIOS initialize SMM space, and 
this bit may be used to initialize SMM memory prior to servicing the 
first SMI. When SM_LOCK is set to 1, SM_OPEN is reset to 0 and 
becomes read only. 

5 SM_CLOSE RW SMM Space Closed—When this bit is set to 1, SMRAM i snot 


accessible to data references, even if SMM mode is active. Code 
references may still access SMRAM. 


This allows SMM software to reference the VGA legacy memory 
"through" SMM space to update the display when the SMM 
Compatible region is active since it is mapped to A0000h to BFFFFh 
(the VGA memory address range). This mode takes advantage of the 
split code/data accesses supported by the TM8000 VNB. 


This bit affects data references that are directed to memory in the 
range of A0000h to BFFFFh only for the Compatible A region. The 
Extended T region and the High H region are not affected by this bit. 
When the SM_LOCK bit is set, this bit becomes read-only for 
software if SMM mode is not active. If SMM mode is active, the 
SM_LOCK bit does not affect this bit. 
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Bit(s) | Name 


Access 


Function Description 


4 SM_LOCK 


RO, RW 


SMM Space Locked—When this bit is set to 1, SM_OPEN is reset to 
0 and the following bits become read-only: 


SM_LOCK, SM_CLOSE, SM_OPEN, G_SMRAM_EN, TSM_SIZE, 
and T_SMRAM_EN, TSEG_SIZE, HSEG_BASE, H_SMRAM_EN 


Note that SM_CLOSE is only locked if the SMM mode is not active. It 
is still read/writeable in SMM mode. 


The SM_LOCK bit can be set to 1 via a normal PCI configuration 
space write, but can only be cleared by a power-on reset. The 
combination of SM_LOCK and SM_OPEN provide convenience with 
security. The BIOS can use the SM_OPEN bit to initialize SMM 
space and then use SM_LOCK to "lock down" SMM space in the 
future so that application software (or BIOS itself) cannot violate the 
integrity of SMM space, even if the program has knowledge of the 
SM_OPEN bit. 


3 GSM_RAM_EN | RO, RW 


Global SMRAM Enable—This bit globally enables or disables the 
SMRAM regions. 


0: All SMRAM regions are disabled (default) 
1: SMRAM regions are enabled, contingent upon other control bits: 


* The A seg (Compatible SMRAM) region, providing 128 KB of 
DRAM accessible at the AO000h - BFFFFh address range while 
in SMM, is enabled if E_SMRAM_CR[H_SMRAM_EN]=0. 

* The H seg (High SMRAM) region, providing 128 KB of DRAM 
accessible starting at the address specified in HSEG_BASE 
while in SMM, is enabled if E_SMRAM_CR[H_SMRAM_EN]=1. 

* The T seg (Extended SMRAM) region, providing DRAM with a 
size specified by TSEG_SIZE and starting at the address 
(TOM - TSEG_SIZE) while in SMM, is enabled if 
E_ SMRAM_CR[T_SMRAM_EN]=1. 


Once SM_LOCK is set, this bit becomes read only. 


2:0 CSM_BASE RO 


Compatible SMM Space Base Segment—This field indicates the 
location of SMM space. SMM DRAM is not remapped, it is simply 
made visible if the conditions are right to access SMM space. 
Otherwise, the access is forwarded to the PCI bus. 


This field is read-only, and is always set to the value ‘010’ to indicate 
that the TM8000 supports the compatible SMM space at addresses 
A0000-BFFFFh. 


esmramck EXtended SMM RAM Control Register 


73h 


Device 0 The ESM_RAM_CR register controls the configuration of Extended SMM RAM (SMRAM) space. The 
Function 0 e@xtended SMM RAM memory provides a write-back cacheable SMM RAM memory space that is above 1 MB. 
(See Table 16 on page 160 for a comparison of TM8000 SMM region support to that provided by the Intel 


82243BX and 815E.) 


Register Name 


Addr Offset 


Size Access Default Value 


ESM_RAM_CR 


73h 


8 Bits RW 3Fh 
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Bit(s) | Name Access _| Function Description 
7 HSM_RAM_EN RO, RW_ | H SMM Region Enable—Controls how SMM Compatible region 


and H region accesses are handled. The HSEG_BASE address 
specifies the base address of the H region. 


1: When G_SMRAM_EN is 1 and this bit is set to 1, the H region 
of SMM is enabled and accesses to the region HSEG_BASE to 
HSEG_BASE + 128KB are routed to the SMRAM located at 
A0000h to BFFFFh. In this case the SMM Compatible region 
accesses are disabled and accesses in the address range 
OA0000h to OBFFFFh are forwarded to the HT bus. 


0: When G_SMRAM_EN is 1 and this bit is set to 0, then the SMM 
Compatible region is enabled and accesses to A0000h to BFFFFh 
go to SMRAM at A0000h to BFFFFh instead of being routed to the 
AGP or HT bus. 


Once SM_LOCK in the SMRAM_CR register is set, this bit 
becomes read-only. 


-- RO Reserved 
SM_CACHE RO SMM RAM Cache Policy This bit is read-only and always 1 to 
indicate a write-back cache policy for the TM8000 SMM RAM. 
4 SM_L1_EN RO SMM RAM Cacheability This bit is read-only and always 1 to 


indicate that both compatible and extended SMM RAM accesses 
are always cacheable by the TM8000. 


3 SM_L2_EN RO SMM RAM Cacheability This bit is read-only and always 1 to 
indicate that both compatible and extended SMM RAM accesses 
are always cacheable by the TM8000. 


2:1 -- RO Reserved—Hardwired to 11b. 


TSM_RAM_EN RO, RW_ | T Segment SMM RAM Enable—lIn conjunction with 
SMRAM_CR[G_SMRAM_EN] and TSEG_SIZE, this bit enables 
or disables the T region of SMRAM. If G_LSMRAM_EN is 1, and 
TSEG_SIZE is not zero, then when T_SMRAM_EN is 


1: T region is enabled 
0: T region is disabled (this is the default). 


The control and operation of SMRAM is described in Initialization 
and State Change on page 161 and SMRAM Regions on page 35. 
Once SM_LOCK in the SMRAM_CR register is set, this bit 
becomes read-only. 


TsEG_sizE TSEG Size Register 
74-75h 


Device 0 
Function 0 


The size value that is programmed into this register is the number of 128 KB increments of T region SMRAM. 
The default value of 0002h represents 1 x 128 KB or 128 KB of SMRAM in the T region. Once SM_LOCK in 
the SMRAM_CR register is set, this register becomes read only. 


Register Name Addr Offset Size Access Default Value 
TSEG_SIZE 74-75h 16 Bits RO, RW 0002h 
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HSEG_BASE 
76-77h 


Device 0 
Function 0 


Bit(s) Name 


Access 


Function Description 


15:1 


RO, RW 


TSEG Size—Specifies the T region SMRAM size in 128 KB increments. If 
an attempt is made to write a value greater than (TOM - 1)MB to the 
TSEG_SIZE register, it is silently limited, so as to leave 1MB of DRAM 
accessible to non-SMM mode x86 programs. 


Note: Due to the value limiting described in the preceding paragraph, 
writing of this register one byte at a time may produce unanticipated results. 


RO 


Reserved 


HSEG Base Register 


SMRAM H region base. Once SM_LOCK in the SMRAM_CR register is set, this register becomes read only. 


Register Name 


Addr Offset 


Size Access Default Value 


HSEG_BASE 


76-77h 


16 Bits RO, RW FEEAh 


Bit(s) Name 


Access 


Function Description 


15:1 


RO, RW 


HSEG Size—This value represents the upper 15 bits of the SMM H region 
base address. The base address must be on 128 KB boundaries. The 
default address for the H region is FEEAO000h. 


The H region is 128 KB and when it is enabled by setting the 
H_SMRAM_EN bit of the E_SMRAM_CR register, accesses to the H 
region are routed to SMRAM at A0000h to BFFFFh. When the 
H_SMRAM_EN bit is a 0 then the accesses to the H region are ignored and 
addresses in the Compatible region (A0000h to BFFFFh) are routed to the 
SMRAM at A0000h to BFFFFh. 


RO 


Reserved 


pm_crz andr ACP] Power Management Control Address Register 


78-79h 


Device 0 
Function 0 


The address of the PM_CR2 register in I/O memory space. 


Register Name Addr Offset Size Access Default Value 
PM_CR2_ADDR_ | 78-79h 16 Bits RW 0022h 

Bit(s) | Name Access _ | Function Description 

15:0 PMCR2ADDR_ | RW ACPI Power Management Control Register (PM_CR2) 


Address—tThis 16-bit value specifies the address of the PM_CR2 
register in I/O space. 


The TM8000 VNB allows relocating PM_CR2 to be compatible with 
other power management controller core logic components. For 
example, the ALI M1563 southbridge expects the PM_CR2 register 
at (ACPI_BASE + 30h) in I/O space. 
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pm_cR ACPI Power Management Control Register 


7Ah 
F Power management control settings. See Chapter 5, Power Management. 
Device 0 
Function 0 
Register Name Addr Offset Size Access Default Value 
PM_CR 7Ah 8 Bits RW and RO 18h 
Bit(s) | Name Access _| Function Description 
7 -- RO Reserved. 
6 PM_CR2_EN ACPI Control Register Enable—Enables or disables access to the 


ACPI control register PM_CR2 (I/O address PM_CR2_ADDR, default 
is I/O address 0022h). 


1: Enable. The ACPI control register is enabled, and all CPU cycles 
to PM_CR2 are handled by the TM8000, not forwarded to HT. Note: If 
the PM_CR2_OPT[PM_CR2_FORWARD] bit is set to 1, these cycles 
are forwarded to the HT bus, in addition to being handled by the 


TM8000 VNB. 

0: Disable (default). All CPU cycles to PM_CR2 are forwarded to HT. 
5 -- RO Reserved. 
4 NREF_EN RO Normal Refresh Enable—This bit is read only and set to 1 to indicate 


that normal refresh operation is used following a Power On Suspend 
(POS) or Suspend to RAM (STR) state. 


3 QS_MODE RO Quick Start Mode—This bit is read only and set to 1 to indicate that 
quick start mode is always enabled. 


2 -- Reserved. 

AGP_DIS RW AGP Disable—Whern this bit is set to 1, the AGP interface is disabled 
and all AGP-related configuration bits and registers are hardwired to 0. 
The default is 0 to enable AGP. 

Note: This bit does not disable the AGP device connected to the AGP 
interface directly. Accesses to the AGP device and from the AGP 
device are disabled. 


0 -- Reserved. 


pm_cr2_optT ACPI Power Management Control Options Register 


7Bh 
navieed ACPI power management control options. See Chapter 5, Power Management for more information about 
Function Power management. 
Register Name Addr Offset Size Access Default Value 
PM_CR2_OPT 7Bh 8 Bits RW 00h 
Bit 
No. Name Access | Function Description 
7 -- RO Reserved. 
6 PM_CR2_FORWARD RW Arbiter Control—lf set to 1, I/O writes to the arbiter control 


port (as specified in PM_CR2_ADDR) are forwarded to the 
HT bus (so that, e.g., the southbridge can snoop them). 


The default is 0. In this case, all I/O writes to the arbiter 
control port are handled internally by the TM8000. 
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SMAFD 
7C-7Fh 


Device 0 
Function 0 


Name 


Access 


Function Description 


RO 


Reserved. 


C3_NORMAL 


RW 


C3 Normal or Deep—This bit selects controls the "depth" 
of the ACPI C3 state. 


1: normal 
0: deep (default) 


C2_PSM_EN 


RW 


C2 State Power Saving Mode Enable—This bit is used to 
enable the memory controller's power saving mode, 
whenever the CPU enters the ACPI C2 state. 


In power saving mode, the clock enable lines to main 
memory are active only when they are being accessed or 
refreshed. This decreases power dissipation, but increases 
the latency for a memory cycle by one clock. 


1: Enable power saving mode when in ACPI C2 state. 

0: Do not enable power saving mode when in ACPI C2 
state; PSM mode is enabled, however, if bit 0 
(GLBL_PSM_EN) is set. (default) 


GLBL_PSM_EN 


RW 


Global Power Saving Mode Enable—This bit is used to 
enable the memory controller's power saving mode at all 
times. 


In power saving mode, the clock enable lines to memory 
are active only when they are being accessed or refreshed. 
This decreases power dissipation, but increases the latency 
for a memory cycle by one clock. Note that this power 
saving mode is orthogonal to the ACPI CPU power saving 
(clock control) states. This option is disabled by default. 


1: Enable power saving mode. 
0: Power saving mode disabled; the memories remain in 
full speed mode. (default) 


STPCLK System Management Action Field Definition 
Register 


System Management Action Field Definition Register. Each 4-bit field contains a value that defines the 
meaning of the associated SMAF value. Possible definitions are included below. See System Management 
Action Field (SMAF) Support on page 45 for a recommended SMAF mapping. 


Register Name Addr Offset Size Access Default Value 
SMAFD 7C-7Fh 32 Bits RW FB1A 8732h 
Bit No. Name Access | Function Description 

31:28 RW SMAF Value 7—See table below. 

27:24 RW SMAF Value 6—See table below. 

23:20 RW SMAF Value 5—See table below. 

19:16 RW SMAF Value 4—See table below. 

15:12 RW SMAF Value 3—See table below. 

11:8 RW SMAF Value 2—See table below. 
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Bit No. Name Access | Function Description 
7:4 RW SMAF Value 1—See table below. 
3:0 RW SMAF Value 0—See table below. 
SMAF Field 
Value (hex) Function Description 
00 Thermal Throttling (hardware-initiated STPCLK throttling in response to thermal event) 
01 ACPI Throttling (initiated by write to ACP! P_CNT register) 
02 ACPI C2 (initiated by read of ACPI P_LVL2 register) 
03 ACPI C3 
04 ACPI C4 
05-6 Reserved 
07 Hypertransport (HT) Link Width/Frequency Change 
08 ACPI $1 
09 Reserved 
0A ACPI S3 
0B ACPI S4/S5 
0C-0E Reserved 
OF HT_RESERVED (i.e., reserved for use by the HyperTransport specification) 


SBE_ADDR Single-Bit ECC Error Address Register 


80-83h 
Device 0 This register is used to report the correctable single-bit ECC error address when the ECC hardware in the 
Function 0 SDRAM controller detects a single-bit ECC error. Also see Error Command Register on page 73 and Error 


Status Register on page 75. ECC support provided by the TM8000 VNB is described in greater detail in 
SDRAM ECC Support on page 36. 


Register Name Addr Offset Size Access Default Value 

SBE_ADDR 80-83h 32 Bits RO 0000 0000h 

Bit(s) | Name Access_ | Function Description 

31:5 RO Single-Bit ECC Error Address—This field is used to store the 32 byte 


aligned memory address in main memory where a correctable single- 
bit error occurred. If the First ECC Error Address bit in the ERRCMD 
register is set then this field contains the address of the first single-bit 
error, even if additional single-bit errors occurred later. Clearing the 
Single-bit ECC Error bit in the ERRSTS register allows this address 
to be updated again. If the First ECC Error Address bit in the 
ERRCMD register is not set then the address stored in this field is the 
address of the last single-bit error that occurred. 


Note that the addresses of errors in x86 space are in the range from 0 
to TOM, while those in Code Morphing Software space are at the top of 
the 32-bit address space. Differentiation between the memory spaces, 
if desired, can be achieved by a simple range check of the address 
against the value in TOM. Note also that the physical address of the 
error (necessary to identify the failing component) is the address 
reported in the ADDR field plus Code Morphing Software size, as 
specified in the CMSMEM register. 
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MBE_ADDR 
84-87h 


Device 0 
Function 0 


ERRCMD 
90h 


Device 0 
Function 0 


Bit(s) | Name Access _| Function Description 
4 -- RO Reserved 
3:0 RO Single-Bit ECC Error Count—This field is a counter (saturating with 


maximum value of 7) of the single-bit errors that have been detected 
since the Single-bit ECC Error bit in the ERRSTS register was last 
reset. Clearing the Single-bit ECC Error bit in the ERRSTS register 
clears the count to zero. 


Multi-Bit ECC Error Address Register 


This register is used to report the uncorrectable multi-bit ECC error address when the ECC hardware in the 
SDRAM controller detects a multi-bit ECC error. Also see Error Command Register on page 73 and Error 
Status Register on page 75. 


ECC support provided by the TM8000 VNB is described in greater detail in SDRAM ECC Support on 


page 36. 


Register Name 


Addr Offset 


Size Access Default Value 


MBE_ADDR 


84-87h 


32 Bits RO 0000 0000h 


Bit(s) 


Name 


Access 


Function Description 


31:5 


RO 


Multi-Bit ECC Error Address—This field is used to store the 32 byte 
aligned physical memory address in main memory where an 
uncorrectable multi-bit error occurred. If the First ECC Error Address 
bit in the ERRCMD register is set then this field contains the address of 
the first multi-bit error, even if additional multi-bit errors occurred later. 
Clearing the Multi-bit ECC Error bit in the ERRSTS register allows 
this address to be updated again. If the First ECC Error Address bit in 
the ERRCMD register is not set then the address stored in this field is 
the address of the last multi-bit error that occurred. 


Note that the addresses of errors in x86 space are in the range from 0 
to TOM, while those in Code Morphing Software space are at the top of 
the 32-bit address space. Differentiation between the spaces, if 
desired, can be achieved by a simple range check of the address 
against the value in TOM. Note also that the physical address of the 
error (necessary to identify the failing component) is the address 
reported in the ADDR field plus Code Morphing Software size, as 
specified in the CMSMEM register. 


RO 


Reserved 


RO 


Multi-Bit ECC Error Count—This field is a counter (saturating with 
maximum value of 7) of the multi-bit errors that have been detected 
since the Multi-bit ECC Error bit in the ERRSTS register was last 
reset. Clearing the Multi-bit ECC Error bit in the ERRSTS register 
clears the count to zero. 


Error Command Register 


This register controls the TM8000 VNB response to various system errors. On the HT bus, SERR# is signaled 
by the device detecting the error by flooding the bus with sync packets. The actual assertion of SERR# is 
enabled via the CMD register. Also see Error Status Register on page 75. 
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ECC support provided by the TM8000 VNB is described in greater detail in SDRAM ECC Support on 


page 36. 
Register Name Addr Offset Size Access Default Value 
ERRCMD 90h 8 Bits RW 80h 


Bit(s) |Name | Access | Function Description 


7 RW SERR# on AGP Non-Snoopable Access Outside of Graphics Aperture— 
When enabled and bit 10 of ERRSTS registers transitions from 0 to 1 (during 
an AGP access to the address outside of the graphics aperture) then an 
SERR# assertion event is generated. 


1: Enable (default) 
0: Disable 


6 RW SERR# on Invalid AGP DRAM Access—AGP non-snoopable read 
accesses to locations outside the graphics aperture and outside the main 
DRAM range (640KB to 1MB range or above TOM) are invalid. When this bit 
is set to 1, bit9 of ERRSTS is also set. SERR# is asserted when this error 
occurs. 


1: Enable 
0: Disable reporting of this condition via SERR# (default) 


5 RW SERR# on Access to Invalid Graphics Aperture Translation Table 
Entry—When enabled, the TM8000 VNB sets bit 8 of the ERRSTS and 
asserts SERR# following a read or write access to an invalid entry in the 
Graphics Aperture Translation Table residing in main memory. 


1: Enable 
0: Disable reporting of this condition via SERR# (default) 
4 RW SERR# on Receiving Target Abort—When this bit is set to 1, the TM8000 

VNB asserts SERR# on receiving a target abort on either the HT or AGP bus. 
1: Enable 
0: Disable (default) 
Reserved 

RW First ECC Error Address—This bit controls whether the Single-bit ECC Error 


Address register (SBE_ADDR) and the Multi-bit ECC Error Address register 
(MBE_ADDR) keep the first ECC error address. This bit is ignored if the 
system does not have ECC SDRAM memory installed. (See Single-Bit ECC 
Error Address Register on page 72 and Multi-Bit ECC Error Address Register 
on page 73. Also see The ECC support provided by the TM8000 VNB is 
described in greater detail in SDRAM ECC Support on page 36.) 


1: Do not update the address if the register already contains a valid one 
(i.e., if the corresponding SBE or MBE bit in ERRSTS is already set) 
0: Update the error address on each error that occurs (default) 
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Bit(s) | Name | Access | Function Description 


) RW Multi-bit ECC Error—This bit controls signalling, via the SERR# pin, of multi- 
bit ECC errors. If multi-bit ECC signalling is enabled here, and error signaling 
is also globally enabled by the SERRE bit in the CMD register, then an error is 
signaled when a multi-bit ECC error is detected by the SDRAM controller. 
This bit is ignored if ECC capabilities are either not present or disabled (i.e., 
NBCFG[ECCP] is 0). (The ECC support provided by the TM8000 VNB is 
described in greater detail in SDRAM ECC Support on page 36.) 


1: Enable signalling of multi-bit ECC errors 
0: Disable signalling of multi-bit ECC errors, if CMD[SERRE]=1 


0 RW Single-bit ECC Error—This bit controls signalling, via the SERR# pin, of 
single-bit ECC errors. If single-bit ECC signalling is enabled here, and error 
signaling is also globally enabled by the SERRE bit in the CMD register, then 
an error is signaled when a single-bit ECC error is detected by the SDRAM 
controller. This bit is ignored if ECC capabilities are either not present or 
disabled (i.e., NBCFG[ECCP] is 0). (The ECC support provided by the 
TM8000 VNB is described in greater detail in SDRAM ECC Support on 

page 36.) 


1: Enable signalling of single-bit ECC errors 
0: Disable signalling of single-bit ECC errors, if CMD[SERRE]=1 


eRRsts Error Status Register 


91-92h 
Hevieso This register is used to report error conditions via the SERR# mechanism. SERR# is generated on a 0-to-1 
Function 0 transition of any of these flags, if enabled by the ERRCMD register (see Error Command Register on 
page 73). ECC support in the TM8000 VNB is described in greater detail in SDRAM ECC Support on 
page 36. 
Register Name Addr Offset Size Access Default Value 
ERRSTS 91-92h 16 Bits RO, RWC 0000h 


Bit(s) | Name Access_ | Function Description 
15:11 RO Reserved 
10 RWC AGP Non-Snoopable Access Outside of Graphics Aperture— 


1: AGP access occurred outside of the graphics aperture range 

0: Software must write a 1 to clear this bit 

9 RWC Invalid AGP non-snoopable DRAM read access— 

1: AGP non-snoopable READ access was attempted outside of the 
graphics aperture and outside main memory (640KB—1MB or above TOM). 
0: Software must write a 1 to clear this bit 

8 AIGATT | RWC Access to Invalid Graphics Aperture Translation Table Entry— 

1: An invalid translation table entry was returned in response to a graphics 


aperture read or write access 
0: Software must write a 1 to clear this bit 


7:2 RO Reserved—These bits are hardwired to 0. 
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Bit(s) | Name Access _ | Function Description 

1 RWC Multi-bit ECC Error—tThis bit indicates when a multi-bit ECC error has 
been detected by the SDRAM memory controller. This bit is RWC (i-e., 
once set it stays set, until reset by writing a 1 to it). 

1: A multi-bit ECC error has been detected 

0: A multi-bit ECC error has not been detected 

0 RWC Single-bit ECC Error—tThis bit indicates when a single-bit ECC error has 
been detected by the SDRAM memory controller. This bit is RWC (i-e., 
once set it stays set, until reset by writing a 1 to it). 


1: A single-bit ECC error has been detected 
0: A single-bit ECC error has not been detected 


up_rom_sz Upper ROM Size Register 


94-95h 
Revie 0 This register is used in mapping part of the x86 address space to the TM8000 LPC ROM controller. It 
Function 0 specifies the size of the upper ROM region. LPC ROM mapping control is described in section LPC Bus 


Interface on page 15. 


The upper ROM region is contiguous and extends downwards from 4GB in 16KB increments. It can extend as 
far as 8MB below 4GB. There is no address relocation in this range. That is, address X in the region 
corresponds to address X in the LPC-connected ROM. This region allows visibility to up to 8MB of ROM from 
the top down. 


Register Name Addr Offset Size Access Default Value 

UP_ROM_SZ 94-95h 16 Bits RW 0100h 

Bit(s) | Name Access _ | Function Description 

15:6 ROM_UPPER_SIZE | RW Size of Upper ROM Region—Specifies the size of the upper 


ROM region, in units of 16KB. All values (0 through 1023) are 
valid, providing for a maximum reion size of 16,368KB. 


The default is 4, corresponding to region size of 64KB. 
5:0 -- RO Reserved 


cow.romsz LOWer ROM Size Register 
96-97h 
Device 0 ‘This register is used in mapping part of the x86 address space to the TM8000 LPC ROM controller. It 
Function 0 specifies the size of the lower ROM region. LPC ROM mapping control is described in section LPC Bus 
Interface on page 15. 


The lower ROM region is contiguous and extends downwards from 1MB in 16KB increments. It can extend as 
far as 256KB below 1MB. This region is relocated so that address (1MB - X) in the region corresponds to 
address (4GB - X) in the LPC-connected ROM. This region allows visibility to up to 256KB of ROM from the 
top down. It is typically used as a partial alias for the upper ROM region. 


Register Name Addr Offset Size Access Default Value 
LOW_ROM_SZ 96-97h 8 Bits RW 0100h 
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ROM_FRBDN 
98-99h 


Device 0 
Function 0 


ROM_PRTCTD 
9A-9Bh 


Device 0 
Function 0 


Bit(s) | Name Access 


Function Description 


15:11 | -- RO 


Reserved 


10:6 ROM_LOWER_SIZE | RW 


Size of Lower ROM Region—Specifies the size of the lower 
ROM region, in units of 16KB. Valid values range from 0 to 
16, inclusive. Values greater than 16 are converted silently to 
16 when written. 


The default is 4, corresponding to region size of 64KB. 


5:0 - RO 


Reserved 


Forbidden ROM Size Register 


This register is used in write-protecting ROM connected to TM8000’s LPC ROM controller. It specifies the 
size of the “forbidden” region. In order to provide effective protection of the LPC ROM, the writability of this 
register is affected by several factors; they and all of LPC ROM write-protection control is described in section 


LPC Bus Interface on page 15. 


Register Name Addr Offset Size Access Default Value 

ROM_FRBDN 98-99h 16 Bits RW 0000h 

Bit(s) | Name Access _ | Function Description 

15:6 ROM_FORBIDDEN_SIZE RW Size of Forbidden ROM Region—Specifies the size 
of the “forbidden” write-protect ROM region, in units of 
16KB. It is capped at the value corresponding to the 
size of the BIOS portion. Any value larger than this is 
silently converted to the capped value when written. 
The default is 0. 

5:1 -- RO Reserved 


GLOBAL_WRITE_ENABLE 


RW 


GLOBAL_WRITE_ENABLE—This is a single bit with 
the following meanings. 


0: The ROM_FORBIDDEN_ SIZE and 
ROM_PROTECTED_SIZE values control the 
write protection of the BIOS portion. The Code 
Morphing Software portion of the ROM is 
unwritable. This is the reset default. 


1: All visible ROM (as specified by the mapping 
registers settings) is writable. 


Protected ROM Size Register 


This register is used in write-protecting ROM connected to the TM8000 LPC ROM controller. It specifies the 
size of the “protected” region. In order to provide effective protection of the LPC ROM, the writability of this 
register is affected by several factors; they and all of LPC ROM write-protection control is described in section 


LPC Bus Interface on page 15. 


Register Name Addr Offset 


Size 


Access Default Value 


ROM_PRTCTD 9A-9Bh 


16 Bits 


RW OEM-defined 
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Bit(s) | Name Access _| Function Description 
15:6 ROM_PROTECTED_SIZE | RW Size of Protected ROM Region—Specifies the size of 


the “protected” write-protect ROM region, in units of 
16KB. Valid values range from 0 to 512, inclusive. 
Values greater than 512 are converted silently to 512 
when written. The default is 0, allowing writes to any part 
of the ROM. 


5:0 -- RO Reserved 


acpcapip AGP Capability Identifier Register 
AOh 


Device 0 
Function 0 


This register identifies this capabilities linked list item as containing the AGP 2.0 compatible registers when 
AGP is enabled. When AGP is disabled this register returns 00h indicating that no AGP capability is present. 


Register Name Addr Offset Size Access Default Value 
AGPCAPID AOh 8 Bits RO 02h or OOh 


Bit(s) | Name Access _ | Function Description 


7:0 RO AGP Capability ID—Identifies this capabilities linked list item as containing 
AGP registers. If the AGP_DIS bit (PM_CR[1]) is set to 0, this register 
returns the value 02h assigned by the PCI SIG. If the AGP_DIS bit 
(PM_CR[1]) is set to 1, this register returns 0. 


acpnextcar AGP Next Capability Pointer Register 
A1th 


Device 0 This register specifies the next capability pointer to the HT capability. When AGP is disabled, this register 
Function Q ‘returns 00h since the AGP capability is not part of the capabilities linked list. 


Register Name Addr Offset Size Access Default Value 
AGPNEXTCAP Ath 8 Bits RO D8h or 00h 


Bit(s) | Name | Access | Function Description 


7:0 RO Next Capability Pointer—Points to the next capability item in the capabilities 
linked list. If AGP_DIS (PM_CRJ[1]) is set to 0, this register returns the value 
D8h pointing to the HT capability. If AGP_DIS (PM_CR[1]) is set to 1, this 
register returns the value OOh since this item is not part of the capabilities 
linked list. 


acpveR AGP Version Register 


A2h 
Revied a This register specifies the major/minor AGP version supported by the TM8000 VNB. 
Function 0 
Register Name Addr Offset Size Access Default Value 
AGPVER A2h 8 Bits RO 20h or OOh 
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Bit(s) | Name | Access | Function Description 


7:4 RO Major AGP Revision Number—The major revision number of the AGP 
specification to which the TM8000 VNB conforms. If the AGP_DIS bit 
(PM_CR[1]) is set to 0, this field returns the value 2. This field, together with 
the Minor AGP Revision Number, specifies compliance with the AGP 2.0 


specification. 
If the AGP_DIS bit (PM_CR[1]) is set to 1, this register returns a value of 0. 
3:0 RO Minor AGP Revision Number—The minor revision number of the AGP 


specification to which the TM8000 VNB conforms. This field always returns 0. 


acpstat AGP Status Register 
A4h-A7h 


Device 0 
Function 0 


This register reports AGP compliant device capability information. It reports the AGP maximum request 
queue size and the data transfer rates that are supported. The sideband addressing support, greater than 
4GB address support, and fast-write support are also indicated. Since the TM8000 VNB is AGP 2.0- 
compliant, this register emulates the behavior of the Intel 815e AGPSTAT register instead of the Intel 
82443BX AGPSTAT register. If AGP is disabled then this register returns 0000 0000h. 


Register Name Addr Offset Size Access Default Value 

AGPSTAT A4h-A7h 32 Bits RO OFO00_0203h 

Bit(s) | Name | Access | Function Description 

31:24 | RQ RO Request Queue—This field is hardwired to OFh to indicate a maximum of 16 
outstanding AGP command requests can be handled by the TM8000 VNB. 

23:10 | -- RO Reserved 

9 SBA RO Side Band Addressing Supported—This bit indicates that the TM8000 VNB 
supports side band addressing. This bit is hardwired to 1. 

8:6 -- RO Reserved 

4GB RO Greater Than 4GB Address Support—This bit indicates that the TM8000 

does not support addresses greater than 4 GB. This bit is hardwired to 0. 

4 FW RO Fast Writes—This bit indicates that the TM8000 VNB supports Fast Writes 
from to the AGP master. This bit is hardwired to 1. 

3 -- RO Reserved 

2:0 RATE | RO Data Transfer Rate Capability—After reset the TM8000 VNB reports the 


AGP data transfer rates that it supports. The data transfer rates apply to AGP 
operations delivered via both PIPE# and SBA. 


Bit 0 = 1 - 1x data transfer mode supported 
Bit 1 = 1 - 2x data transfer mode supported 
Bit 2 = 1 - 4x data transfer mode supported 
Bit 2 can be masked to 0 by the AGPCTRL register bit 0 (AGP 4X Override). 


1x and 2x data transfer modes are supported by the TM8000 VNB, therefore 
this bit field has a default value = 011b. 


acpcmd AGP Command Register 
A8h-ABh 


Device 0 
Function 0 


This register provides control of the AGP operational parameters, allowing AGP operations to be disabled or 
enabled. It also allows setting the data transfer rate and enabling or disabling side band addressing. Since the 
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TM8000 VNB is AGP 2.0 compliant this register emulates the behavior of the Intel 815E AGPCMD register 
instead of the Intel 82443BX AGPCMD register. 


Register Name Addr Offset Size Access Default Value 

AGPCMD A8h-ABh 32 Bits RW, RO 0000 0000h 

Bit(s) | Name Access _ | Function Description 

31:10 | -- RO Reserved 

9 SBAEN RW Side Band Address Enable—Tf this bit is 0, then all operations delivered 
via SBA are ignored. 
1: Enable 
0: Disable 

8 AGPEN RW AGP Enable—When this bit is 0, the TM8000 VNB ignores all AGP 


operations, including the sync cycle. 


Any AGP operations received and queued while this bit is set to 1 are 
serviced, even if this bit is changed to a 0. In this case, once all queued 
operations have been serviced new operations are then ignored as long 
as this bit remains 0. 


When this bit is set to 1 the TM8000 VNB responds to AGP operations 
delivered via PIPE#, or to operations delivered via SBA, if the AGP Side 
Band Address Enable bit is also set to 1. 


1 = Enable 
0 = Disable 
7:6 -- RO Reserved 
4GB RO Greater Than 4GB Address Support—This bit indicates that the 


TM8000 VNB does not support addresses greater than 4 GB as an AGP 
target. This bit is hardwired to 0. 


4 FW RW Fast Writes—This bit controls fast-write support from the AGP master. 
1 = Enable 
0 = Disable 
3 -- RO Reserved 
2:0 DTRATE RW Data Transfer Rate—The settings of these bits determine the AGP data 


transfer rate. Only one of these bits can be set at any time. Writes of 
more than one bit in this field is ignored, and the previous setting is 
retained. 


A data transfer rate must be set before the AGP Enable bit is set. The 
same data transfer rate must be programmed into both the AGP master 
and target. Configuration software updates this field by setting only one 
bit that corresponds to the capability of the AGP master after that 
capability has been determined. The selected data transfer rate applies 
to AGP operations delivered via both PIPE# and SBA. 


Bit O = 1: 1x data transfer mode 
Bit 1 = 1: 2x data transfer mode 
Bit 2 = 1: 4x data transfer mode 


The AGPCTRL register bit 0 (AGP 4X Override) can mask bit 2. In this 
case it becomes reserved. Writes to bit 2 are ignored when AGP 4X 
Override is set. This is different from the Intel 815 GMCH operation, 
which ignores the writes but erroneously returns the bit set value on 
subsequent reads. 
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AGPCTRL 
BO-B3h 


Device 0 
Function 0 


APSIZE 
B4h 


Device 0 
Function 0 


AGP Control Register 


This register provides additional control of the AGP interface. It allows overriding 4X data transfer rate and the 
enabling and flushing of the graphics address translation TLB. 


Register Name Addr Offset Size Access Default Value 

AGPCTRL BO-B3h 32 Bits RW 0000 0080h 

Bit(s) | Name Access_ | Function Description 

31:8 -- RO Reserved 

7 GTLBEN | RW GTLB Enable—This bit enables or disables the graphics address 
translation table (GATT) translation lookaside buffer (TLB). 
1: Enable. Normal operations of the GTLB. 
0: Disable. The GTLB is flushed by clearing the valid bits associated with 
each entry. 

6:1 -- RO Reserved 

4XOVR RW 4X Override—When this bit is set to 1, the data transfer rate bit 2 is treated 

as read only and 4X data transfer are disabled. When this bit is 0 the 4X 
data transfer rate can be selected. 


Aperture Size Register 


This register determines the effective size of the graphics aperture used to provide a linear physical address 
range for the graphics software and the AGP master to use to access main SDRAM. This register must be 
updated by the BIOS before the APBASE register size configuration is performed. Bits 5:3 are used to control 
access to bits 27:25 of the APBASE configuration register. When any of the bits 5:3 are 0, then the 
corresponding bit in APBASE 27:25 are hardwired to 0. When any of the bits 5:3 are 1, then the 
corresponding bit in APBASE 27:25 are treated as read/write bits. The default graphics aperture size is 


64MB. 

Register Name Addr Offset Size Access Default Value 

APSIZE B4h 8 Bits RW 30h 

Bit(s) | Name Access_ | Function Description 

7:6 -- RO Reserved 

5:3 APSIZE | RW Graphics Aperture Size—Each bit in APSIZE[5:3] operates on similarly 
ordered bits in APBASE[27:25] of the graphics aperture base address 
(APBASE) configuration register. 
Setting a bit in this field to 0 forces the corresponding bit in APBASE to be 
hardwired to 0 as well. When a bit in this field is 1, the corresponding bit in 
APBASE is read/write. Only the following combinations are allowed: 
111: 32 MB 
110: 64 MB 
100: 128 MB 
000: 256 MB 
The default is 110b, which forces the graphics aperture size to be 64 MB. 

2:0 -- RO Reserved 
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attpaAGE Aperture Translation Table Page Register 
B8-BBh (AGP Mode Only) 


Device 0 


Pencton® This register is used to program the directory table entries in the Graphics Aperture Translation Table 


(GATT). The GATT consists of a two level paging mechanism. The first level consists of a directory table in 
the TM8000 hardware, and the second level consists of page tables in system memory to which the directory 
entries point. The page tables point to the actual graphics pages in memory. The GATT in combination with 
the Translation Lookaside Buffer (TLB) forms the Graphics Aperture Relocation Table (GART). 


The directory table contains 64 entries each of which point to a page table. The directory entries from zero to 
(aperture size in MBs / 4 - 1) must be programmed to point to the appropriate page tables. The directory 
entries are mapped to the correct physical directory entries by the TM8000 VNB. The page tables must be 
located in Write-Back cacheable memory. The page table entries point to the pages of memory that are 
mapped to the 4K pages in the linear graphics aperture. The graphics pages are not required to be in Write- 
Back cacheable memory and can be Write Combinable. The GATT can translate graphics aperture sizes 
from 32MB to 256MB with the default size being 64MB. The graphics aperture size is set by the BIOS 
programming a size value into the APSIZE register before the APBASE register is configured. 


The configuration address CONFADDR register can be programmed with the address of the ATTPAGE 
register and then the successive directory entries can be programmed by 32 bit writes to the configuration 
data CONFDATA register. A directory entry can be read by first doing an 8 bit write. 


Register Name Addr Offset Size Access Default Value 
ATTPAGE B8-BBh 32 Bits RW 0000 0000h 


Bit(s) | Name Access _| Function Description 


31:12 | PPN RW Physical Page Number—The upper 20-bit physical memory address of 
the page table pointed to by this directory entry. This value must point to a 
page in write-back cacheable system memory. This value must be below 
the value of X86TOP, which is the value of (TOM - TSEG_SIZE) if the T 
region is enabled for SMRAM. If the T region is disabled then the value of 
X86TOP is the value of TOM. 


11:9 PATI RW Page Attribute Table Index—This field specifies the PAT index value that 
is used for the memory page attribute for this page table page. The GATT 
pages are required to be in Write Back Cacheable memory. This field must 
be set to the index of the Write-Back cacheable entry in the PAT table as 
specified by the PAT MSR (see PAT Support on page 34) of the TM8000 
CPU for the Write-Back cacheable index. Any other value can result in 
unpredictable behavior, including machine checks (#MC). 


8 RW Directory Entry Valid—This bit indicates if this directory entry is valid or 
invalid. If 1, then use the other bits to set the directory entry to point to the 
specified page table. If 0, then ignore the other fields. 


7:6 -- RO Reserved 
5:0 R RW GATT Directory Index—The index in the 64-entry directory table. 
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The following tables show the layout of the graphics aperture address bits for different APSIZE settings. The 
bits used for APBASE and the Directory Table Index vary depending on APSIZE, as shown in the following 
table. 


APSIZE Bit Description 


32 MB 31:25 | APBASE. This field represents the value programmed into APBASE during system 
64 MB 31:26 configuration by the BIOS and/or the operating system. These bits are unused by 
the GART during graphics aperture address translation. 


128 MB 31:27 
256 MB 31:28 


32 MB 24:22 | Directory Table Index. These bits are used as an index into the directory table. 
64 MB 25:22 | The selected directory table entry points to a page table in system memory. 


128 MB 26:22 
256 MB 27:22 


32-256 MB | 21:12 | Page Table Index. These bits are used as an index into the page table pointed to 
by the selected directory entry. 


32-256 MB | 11:0 Page Offset. The byte offset in the page selected by the selected page table entry. 


oem_upcrade_ofo:} CQEM Upgrade ID Registers 
C0-C7h 
Device 0 This is an array of two 32-bit OEM upgrade ID registers. They are intended as a way to read the OEM 
Function 0 upgrade ID values, supplied in the OEM configuration table, from x86 programs. One potential use for this 
capability is as a platform identifier. The format of these registers is TBD, and will be covered in a separate 
chapter on upgrades in a future revision of this document. 


Register Name Addr Offset Size Access Default Value 
OEM_UPGRADE_ID[0:1]_ | CO-C7h 32 Bits x 2 | RO OEM-defined 


oemoptio:1} OEM Option Data Registers 
C8-CFh 


Device 0 
Function 0 


This is an array of two 32 bit OEM options data registers. The data in these two registers have the format 
described in the table below. They are defined by settings in the OEMOPT portion of the OEM configuration 
table (see the CMS Guide). 


Register Name Addr Offset Size Access Default Value 
OEMOPTO C8-CBh 32 Bits RW OEM-defined 
OEMOPT1 CC-CFh 32 Bits RW OEM-defined 


TeA NSME TA ‘o Transmeta Proprietary Information Provided Under Nondisclosure Agreement 83 


Part 2: BIOS Programming 
Virtual Northbridge Configuration 


PRELIMINARY INFORMATION 


TM8000 Programming and Configuration Guide 


SUBJECT TO CHANGE August 19, 2003 


BSPAD[0:1] 
DO-D7h 


Device 0 
Function 0 


HTCAP 
D8h 


Device 0 
Function 0 


Bit(s) | Name 


Access 


Function Description 


31:0 -- 


RO 


OEM Defined Field—The properties of this register are defined by three 
fields in the OEM configuration table: reset value, canset, and canclr. 


The OEMOPT default value is determined by the reset value field in the 
OEM configuration table. If a bit is set in the canset field, that particular bit 
can be set by writing a 1 to the corresponding OEMOPT field. Similarly, if a 
bit is set in the cancir field, that particular OEMOPT bit can be cleared by 
writing a 0 to the corresponding OEMOPT field. To summarize: 


OEM Config Table 

canset canclr OEMOPT access 
0 0 read-only 

0 1 read-clear 

1 0 read-set 

1 1 read-write 


BIOS Scratch Pad Registers 


This block provides two DWORD-sized general purpose read/write registers for the BIOS to perform the 
configuration routine. The registers in this range are defined as read/write and are initialized to all 0's after 
PCIRST#. The BIOS can access these registers through the normal PCI configuration register mechanism, 
accessing 1, 2 or 4 bytes in every data access. 


Register Name Addr Offset Size Access Default Value 
BSPADO DO-D3h 32 Bits RW 0000 0000h 
BSPAD1 D4-D7h 32 Bits RW 0000 0000h 
Bit(s) | Name Access _| Function Description 

31:0 -- RO BIOS Workspace 


HT Capability Identifier Register 


This register identifies this capabilities block as containing the HyperTransport compatible configuration 
registers to control the host/secondary HT link. 


Register Name Addr Offset Size Access Default Value 

HTCAP D8h 8 Bits RO 08h 

Bit(s) | Name Access _ | Function Description 

7:0 RO HT Capability ID—Identifies this capabilities block as containing HT 


configuration registers. This field has the value 08h as defined in the HT 
1.02 specification. 
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HTNEXTCAP 
D9h 


Device 0 
Function 0 


HTCMD 
DA-DBh 


Device 0 
Function 0 


HT Next Capability Pointer Register 


This register identifies this capabilities block as containing the HyperTransport compatible configuration 
registers to control the host/secondary HT link. 


Register Name Addr Offset Size Access Default Value 

HTNEXTCAP D9h 8 Bits RO 00h 

Bit(s) | Name Access_ | Function Description 

7:0 RO Next Capability Pointer—This field is hardwired to OOh, indicating a null 
capabilities linked list. 


HT Command Register 


This register defines the capabilities of the HyperTransport link originating from the host bridge. 


The HyperTransport host bridge is assigned device number 0. To perform the HT device enumeration, the 
Device Number field must be programmed to a high numbered value such as 31 so that it does not block 
configuration cycles to the other devices on the HT chain. Upon power-up or cold reset, all HT devices have a 
default device number or unit id of zero. The device enumeration finds each device on the chain in sequence 
from the host bridge, by doing configuration reads for device number zero. As each device is found, its device 
number is set to a higher device number based on the unit ID count field specified in the HT command 
configuration register. Each device number is set to the previous device number plus the number of unit IDs 
required by the previously configured device in the chain preceding the current one being configured. 


After all of the devices in the chain have been configured then the host bridge device number is restored to 0. 


Register Name Addr Offset Size Access Default Value 

HTCMD DA-DBh 16 Bits RW, RO 2001h 

Bit(s) | Name Access _ | Function Description 

15:13 RO Capability Type—Host interface type. Hardwired to 001b. 

12 RO Drop on Uninititalized Link—Not supported, hardwired to 0. 

11 RO Inbound EOC Error—Hardwired to 0, double-hosted chains not supported. 

10 RO Act as Slave—Hardwired to 0, double-hosted chains not supported. 

9 -- RO Reserved 

8 RO Host Hide—Hardwired to 0, double-hosted chains not supported. 

7 RO Chain Side—Hardwired to 0, double-hosted chains not supported. 

6:2 RW Device Number—This field specifies the device ID of the host/bridge. It 
defaults to 0 on power-up or cold reset. 

1 RO Double Ended—Hardwired to 0, double-hosted chains not supported. 

0 RO Warm Reset—Hardwired to 1, reset initiated via HT link control register not 
supported. 
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HTcTRL HT Link Control Register 


DC-DDh 
Device 0 This register controls the host bridge HyperTransport link operation. 
Function 0 
Register Name Addr Offset Size Access Default Value 
HTCTRL DC-DDh 16 Bits RW, RO 0020h 


Bit(s) | Name Access _| Function Description 
15 -- RO Reserved 


14 RW Extended CTL Time—If this bit is set, during the link initialization, CTL is 
asserted for 50us after the point where both the transmitting device has 
asserted CTL and it has sampled CTL asserted from the other side of the 
link. If this bit is clear, CTL only needs to be asserted for 16 bit-times. 


13 RW HT STOP Tri-state Enable—This bit controls whether the transmitter 
tri-states the link during the disconnected state of an HTSTOP sequence. 
When this bit is set, the transmitter tri-states the link. When this bit is clear, 
the transmitter continues to drive the link. This bit is cleared by cold reset 
and persistent through warm reset. 


0: Driven during disconnect of an HTSTOP. (default) 
1: Tri-stated during disconnect of an HTSTOP. 


12 RO Isochronous Enable—Hardwired to 0, function not supported. 
11:9 -- RO Reserved—Hardwired to 0. 
8 RWC CRC Error—This field is set by hardware when a CRC error is detected on 


byte lane 0 of the incoming link. This bit is persistent through warm reset, 
and is reset to 0 at cold reset. This bit is cleared by writing a 1 to the bit. 


0: No error (default) 
1: Error on byte lane 0 


7 RW Transmitter Off—This bit provides a mechanism to shut off a link 
transmitter for power savings or EMI reduction. When set, no output signals 
on the link toggle. This bit resets to 0, and can be set by software writing a 
1 to the bit. If the HT link is not connected then this bit is set by hardware 
and cannot be cleared by software in this case. 


0: Transmitter on (default) 
1: Transmitter off 


RO End of Chain—Hardwired to 0. 


5 RO Initialization Complete—This bit is reset to 0 and is then set to 1 by 
hardware when the low-level link initialization sequence is complete. If 
there is no device on the other end of the link, or if that other device is 
unable to properly perform the low-level link initialization protocol, this bit 
never gets set to 1. Software must not attempt to send any packets across 
the link until this bit is set. CRC checking on the link does not begin until 
initialization is complete. By the time any x86 software examines this 
register, this bit should be set; if not, that indicates a bus initialization 
failure. 


0: Initialization is not complete. 
1: Initialization is complete. 
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Bit(s) 


Name 


Access 


Function Description 


4 


RWC 


Link Failure—tThis bit is set if a failure has been detected on the link or if 
the link is not connected. This bit is also set by hardware in the event of a 
CRC error if the CRC Flood Enable bit is set. 


This bit is persistent through warm reset and is cleared to by a cold reset. 
Software can clear this bit by writing a 1 to it. If this bit is set, hardware 
does not attempt to synchronize this link on a warm reset. This prevents the 
Initialization Complete bit from being set on either end of the link. 


0: No link failure detected (default) 
1: Link failure detected 


RW 


CRC Force Error— When this bit is set, bad CRC is generated on all 
transmitting lanes as enabled by the Link Width Out bit in HTCFG (see 
HTCFG on page 87). The transmitted data is not affected by this bit. 


0: Don’t generate bad CRC (default value) 
1: Generate bad CRC 


RO 


CRC Start Test—This bit is hardwired to 0. 


RW 


CRC Flood Enable— 

0: Don’t generate sync packets on CRC errors. The Link Failure bit is not 
set. CRC checking logic still runs on all data lanes enabled by Link Width 
In, and detected errors still set the CRC Error bits. This is the default value. 


1: Generate sync packets on CRC errors. Detected CRC errors set the 
CRC Error bits and the Link Failure bit. 


RO 


Reserved 


HTcFG HT Link Configuration Register 


DE-DFh 
Bovies 0 This register configures the host bridge HyperTransport link operation. 
Function 0 

Register Name Addr Offset Size Access Default Value 

HTCFG DE-DFh 16 Bits RO 0000h 

Bit(s) | Name | Access | Function Description 

15 RO Doubleword Flow Control Out Enable—DWORD flow not supported, 
hardwired to 0. 

14:12 RO Link Width Out—This field controls the utilized link output width that may not 
exceed the Max Link Width Out field. It is persistent through warm reset. 
After cold reset, this field is initialized by hardware based on the results of the 
output link width negotiation sequence. 
000: 8 bits 
001: 16 bits (not available because of max width of 8 bits) 
010: Reserved 
011: 32 bits (not available because of max width of 8 bits) 
100: 2 bits 
101: 4 bits 
110: Reserved 
111: Link physically not connected 

11 RO Doubleword Flow Control In Enable—DWORD flow not supported, 
hardwired to 0. 
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HTREV 
EOh 


Device 0 
Function 0 


HTFREQ 
E‘h 


Device 0 
Function 0 


Bit(s) | Name 


Access 


Function Description 


10:8 


RO 


Link Width In—This field controls the utilized link input width that may not 
exceed the Max Link Width In field. It is persistent through warm reset. After 
cold reset, this field is initialized by hardware based on the results of the input 
link width negotiation sequence. 


000: 8 bits 

001: 16 bits (not available because of max width of 8 bits) 
010: Reserved 

011: 32 bits (not available because of max width of 8 bits) 
100: 2 bits 

101: 4 bits 

110: Reserved 

111: Link physically not connected 


RO 


Doubleword Flow Control Out—DWORD flow not supported, hardwired to 
0. 


6:4 


RO 


Max Link Width Out—This field contains three bits that indicate the physical 
width of the outgoing side of the HT link implemented by the host/bridge. 


This bit is hardwired to 000b indicating a Max Link Width Out of 8 bits. 


RO 


Doubleword Flow Control In—DWORD flow not supported, hardwired to 0. 


RW 


Max Link Width In. This field contains three bits that indicate the physical 
width of the incoming side of the HT link implemented by the host/bridge. 


This bit is hardwired to 000b indicating a Max Link Width In of 8 bits. 


HT Revision ID Register 


This register specifies the HyperTransport specification level to which this link conforms. The TM8000 VNB 
conforms to the HT specification 1.02. 


Register Name Addr Offset Size Access Default Value 

HTREV E0h 8 Bits RO 22h 

Bit(s) | Name | Access | Function Description 

7:5 RO Major Revision—This field contains the major revision of the HT 
specification for the TM8000 VNB implementation. This field is hardwired to 
001b. 

4:0 RO Minor Revision—This field contains the minor revision of the HT 
specification for the TM8000 VNB implementation. This field is hardwired to 
0001 0b. 


HT Frequency Register 


This register specifies the HyperTransport link frequency. 


Register Name 


Addr Offset 


Size Access Default Value 


HTFREQ 


Eth 


8 Bits RW 00h 
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Bit(s) | Name | Access | Function Description 

7:4 RO Error[3:0]—Hardwired to 0, function not supported. 

3:0 RW Link Freq—tThis field specifies the maximum operating frequency of the link's 
transmitter clock. The data rate is twice this value. There are two permitted 
values: 


00h:200MHz (the default) 
02h: 400MHz 


This field is hardwired to 0000b for a maximum frequency of 200 MHz. The 
Link Freq register is cleared by cold reset and its contents are persistent 
across warm reset. 


HTFREQcAP HT Frequency Capabilities Register 


E2-E3h 
Device 0 This register specifies the link frequency capability of the TM8000 VNB host bridge HT link. 
Function 0 
Register Name Addr Offset Size Access Default Value 
HTFREQCAP E2-E3h 16 Bits RO 0005h 


Bit(s) | Name | Access | Function Description 


15:0 RO Link Freq Capabilities—This register contains a 1-bit flag for each 
transmitter frequency that is supported by the host/bridge. This register is 
hardwired to 0005h, indicating that 200MHz and 400MHz operation are both 
supported by the TM8000 VNB. 


HTFEAT HT Feature Capability Register 


E4-E5h 
maven This register contains bits to indicate which optional features this device supports. 
Function 0 
Register Name Addr Offset Size Access Default Value 
HTFEAT E4-E5h 16 Bits RO OO0Ah 


Bit(s) | Name | Access | Function Description 
15:9 RO Reserved 


8 RO Extended Register Set—This bit is hardwired to 0, indicating that the 
Enumeration Scratchpad, Error Handling and Memory Base/Limit Upper 
registers are not supported. 


7:3 RO Reserved 
RO Extended CTL Time—This bit is hardwired to 1, indicating that the Extended 

CTL time is supported. 

2 RO CRC Test Mode—This bit is hardwired to 0, indicating that the link interface 
does not support the CRC Testing Mode. 

1 RO HT Stop Mode—This bit is hardwired to 1, indicating that the link interface 
supports the HT STOP protocol. 

0 RO Isochronous Flow Control Mode—This bit is hardwired to 0, indicating that 


the link does not support isochronous operation. 
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HTFvcHG HT Link Frequency/Voltage Change Register 
E6h 
, This register is used to initiate a VID/FID transaction on the HT link. 
Device 0 
Function 0 
Register Name Addr Offset Size Access Default Value 
HTFVCHG E6h 8 Bits RW 00h 
Bit(s) | Name | Access | Function Description 
7:1 RO Reserved 
0 RW Initiate VID/FID—This bit always returns 0 when read. Writing 0 has no 
effect. Writing 1 initiates a VID/FID transaction by sending a VID/FID 
management packet to the southbridge. 
LR_ATM LongRun Advanced Thermal Management Register 
E8h 
navient This register contains bits for setting the properties of LongRun™ Advanced Thermal Management. 
Function 0 


Register Name Addr Offset Size Access Default Value 

LR_ATM E8h 8 Bits RW Oth 

Bit(s) | Name Access _ | Function Description 

7:5 -- Reserved. 

4 ATM_EN Advanced Thermal Management Enabled—Settings are as follows: 
1: Enable LongRun advanced thermal management. 
0: Disable (default). 

3:1 ATM_LVL Advanced Thermal Management Level—Selects the processor power 
reduction target. When enabled by ATM_EN (bit 4), LongRun Advanced 
Thermal Management attempts to meet or exceed the power reduction 
level specified in this register by lowering the processor frequency and 
voltage. This register has priority to reduce the processor frequency 
below that which is selected in the LongRun MSR (see page 150). 
The setting in this register never has the effect of increasing the 
processor freqeuency and voltage. Since the LongRun power reduction 
responds cubically to the corresponding performance reduction, it is 
significantly more efficient to implement thermal management with 
LongRun than with traditional clock throttling. 
The field is encoded as follows: 
000: Reserved 
001: Reserved 
010: 75.0% power reduction 
011: 62.5% power reduction 
100: 50.0% power reduction 
101: 37.5% power reduction 
110: 25.0% power reduction 
111: 12.5% power reduction 
Example: A value of 110 instructs LongRun to reduce the processor 
power by 25%, such that it is limited to consume no more than 75% of its 
maximum power. 

0 LR_EN LongRun Enabled—When this bit is set, the processor supports 
advanced thermal management via LongRun technology. 
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LR_ATMso LOngRun Thermal Agility Register 
E9h 
Device 0 This register controls LongRun™ Thermal Agility. It is enabled only when LongRun Advanced Thermal 
. Management is enabled by ATM_EN (bit 4 in LR_ATM, above). 
Function 0 
Register Name Addr Offset Size Access Default Value 
LR_ATM80 E9h 8 Bits RW 00h 
Bit(s) | Name Access _ | Function Description 
7:0 RW Temperature—This field is a signed 8-bit value in units of degrees 


Celsius (C). 


This field specifies a temperature that LongRun uses to cap the 
frequency at the highest value at which the processor may run for that 
temperature, depending on a table in the OEM configuration table (see 
OEM Configuration Table in the CMS Guide.) 


6.2.2 


SDRAM Memory Controller Registers 
(Device 0, Function 1-4) 


The SDRAM memory controller provides the interface to SDRAM memory in four DIMM slots or hardwired to 
the system board. The configuration of each SDRAM DIMM slot is controlled by a separate function in device 
0: function 1 is used to configure DIMM slot 0, function 2 is used to configure DIMM slot 1, and so forth. Since 
the configuration registers for these four functions are identical for each DIMM slot, only one configuration 

register definition is shown in this specification. 


NOTE: Registers in the header register space (addresses 00h-3Fh) are “hidden” from PCI inquiries by 


returning OxFF when queried. 


SDRAM memory controller registers are summarized in the following table in order by PCI address offset. 


Table 10: SDRAM Memory Controller Registers (Dev 0, Fn 1-4) Summary 
Description Register Name Addr Size Acc_ | Default Value Pg 
Reserved 00-40h 
SDRAM DIMM Slot Status Register SD_STS 4th 8 Bits | RO 00h 93 
SDRAM DIMM Slot Error Register SD_ERR 42h 8 Bits | RO 00h 94 
SPD ROM Address Register SPD_ADDR 43h 8 Bits | RW | 00h 94 
SPD ROM Data Register SPD_DATA 44-47h | 32 Bits | RW _ | 0000 0000h 94 
DIMM Module Size Register DIMM_SIZE 48-49h | 16 Bits | RO SPD ROM value, 0000h | 95 
Reserved 4A-4Bh 
Maximum Frequency by SPD ROM MAX_FREQ_SPD | 4Ch 8 Bits RO See description 95 
Register 
Maximum Frequency by OEM Config Table | MAX_FREQ_OEM | 4Dh 8 Bits RO See description 96 
Register 
Memory Frequency Register MEMORY_FREQ_ | 4Eh 8 Bits RO See description 96 
Reserved 4Fh 
SPD ROM Data Size Register ROM_DATA_SIZE | 50h 8 Bits | RO SPD ROM value, 00h 96 
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Table 10: SDRAM Memory Controller Registers (Dev 0, Fn 1-4) Summary (Continued) 
Description Register Name Addr Size Acc_ | Default Value Pg 
SPD ROM Total Size of ROM Register ROM_SIZE 5th 8 Bits | RO SPD ROM value, 00h 97 
SPD ROM SDRAM Memory Type Reg. MEM_TYPE 52h 8 Bits | RO SPD ROM value, 00h 97 
SPD ROM Number of Row Addresses Reg. | NUM_ROW_ADDR | 53h 8 Bits RO SPD ROM value, 00h 97 
SPD ROM Number of Column Addrs Reg. | NUM_COL_ADDR | 54h 8 Bits | RO SPD ROM value, 00h 98 
SPD ROM Physical Banks on DIMM NUM_PBANKS 55h 8 Bits | RO SPD ROM value, 00h 98 
Module Register 
SPD ROM DIMM Module Data Width DATA_WIDTH 56-57h | 16 Bits | RO SPD ROM value, 0000h | 99 
Register 
SPD ROM DIMM Voltage Interface Level VOLT_LEVEL 58h 8 Bits | RO SPD ROM value, 0000h | 99 
Register 
SPD ROM SDRAM Cycle Time Register T_CYC 59h 8 Bits | RO SPD ROM value, 00h 99 
SPD ROM SDRAM Access from Clock T_AC 5Ah 8 Bits | RO SPD ROM value, 00h 100 
Time Register 
SPD ROM DIMM Configuration Type Reg. | CFG_TYPE 5Bh 8 Bits | RO SPD ROM value, 00h 100 
SPD ROM Refresh Rate/Type Register REFRESH 5Ch 8 Bits RO SPD ROM value, 00h 100 
SPD ROM Primary SDRAM Width Reg. DRAM_WIDTH 5Dh 8 Bits | RO SPD ROM value, 00h 101 
SPD ROM ECC SDRAM Width Register ECC_WIDTH 5Eh 8 Bits |RO SPD ROM value, 00h 101 
SPD ROM Back-to-Back Random Col BB_RND_COL 5Fh 8 Bits | RO SPD ROM value, 00h 102 
Access Register 
SPD ROM SDRAM Burst Lengths Reg. BURSTLEN 60h 8 Bits | RO SPD ROM value, 00h 102 
SPD ROM Logical Banks on SDRAM Reg. | NUM_LBANKS 61h 8 Bits | RO SPD ROM value, 00h 102 
SPD ROM CAS Latency Register CAS_LAT 62h 8 Bits | RO SPD ROM value, 00h 103 
SPD ROM CS Latency Register CS_LAT 63h 8 Bits | RO SPD ROM value, 00h 103 
SPD ROM Write Enable Latency Register | WE_LAT 64h 8 Bits RO SPD ROM value, 00h 103 
SPD ROM Module Attributes Register MOD_ATTRIBS 65h 8 Bits | RO SPD ROM value, 00h 104 
SPD ROM General Attributes Register GEN_ATTRIBS 66h 8 Bits RO SPD ROM value, 00h 104 
SPD ROM Min CLK Latency at X-0.5 Reg. | MIN_CL_X-0.5 67h 8 Bits | RO SPD ROM value, 00h 105 
SPD ROM Max Data Access Time at X-0.5 | MAX_CL_X-0.5 68h 8 Bits | RO SPD ROM value, 00h 105 
SPD ROM Min CLK Latency at X-1 Reg. MIN_CL_X-1 69h 8 Bits | RO SPD ROM value, 00h 106 
SPD ROM Max Data Access Time at X-1 MAX_CL_X-1 6Ah 8 Bits RO SPD ROM value, 00h 106 
SPD ROM Minimum Row Precharge Time | ROW_PRECHRG | 6Bh 8 Bits RO SPD ROM value, 00h 107 
SPD ROM Min Row to Row Active Delay T_RRD 6Ch 8 Bits RO SPD ROM value, 00h 107 
SPD ROM Min RAS to CAS Delay Register | T_.RCD 6Dh 8 Bits | RO SPD ROM value, 00h 107 
SPD ROM Min Active to Precharge Time T_RAS 6Eh 8 Bits RO SPD ROM value, 00h 108 
SPD ROM Module Bank Density Register | BANK_DENSITY 6Fh 8 Bits | RO SPD ROM value, 00h 108 
SPD ROM Address and Cmd Setup Time | AC_SETUP 70h 8 Bits | RO SPD ROM value, 00h 108 
SPD ROM Address and Cmd Hold Time AC_HOLD 7th 8 Bits | RO SPD ROM value, 00h 109 
SPD ROM Data Setup Time Register D_SETUP 72h 8 Bits RO SPD ROM value, 00h 109 
SPD ROM Data Hold Time Register D_HOLD 73h 8 Bits | RO SPD ROM value, 00h 109 
SPD ROM Reserved for VCSDRAM Reg. | VCSDRAM 74-78h | 8Bitsx4 | RO SPD ROM value, 00h 110 
SPD ROM Min Active to Auto-Refresh T_RC 79h 8 Bits | RO SPD ROM value, 00h 110 
Time 
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Table 10: SDRAM Memory Controller Registers (Dev 0, Fn 1-4) Summary (Continued) 

Description Register Name Addr Size Acc_ | Default Value Pg 
SPD ROM Min Auto-Refresh to Cmd Time | T_RFC 7Ah 8 Bits | RO SPD ROM value, 00h 110 
SPD ROM Max Cycle Time Register T_MAX_CK 7Bh 8 Bits RO SPD ROM value, 00h 111 
SPD ROM Max DQS-DQ Skew Time Reg. | T.MAX_DQSQ 7Ch 8 Bits | RO SPD ROM value, 00h 111 
SPD ROM Max Read Data Hold Skew T_QHS 7Dh 8 Bits | RO SPD ROM value, 00h 111 
Time Register 
SPD ROM Reserved for Superset Info Reg. | SUPERSET 7E-8Dh | 8 Bitsx | RO SPD ROM value, 00h 112 

16 
SPD ROM DIMM SPD ROM Revision Reg. | SPD_REV 8Eh 8 Bits | RO SPD ROM value, 00h 112 
SPD ROM Checksum Register CKSUM 8Fh 8 Bits RO SPD ROM value, 00h 112 
Reserved 70-A7h 
BIOS Scratch Pad Register BSPAD[21:0] A8-FFh | 32 Bits | RW | 0000 0000h 113 
x 22 
sp_sts SDRAM DIMM Slot Status Register 
4th 
Rovean This register specifies the status for the memory in the selected DIMM slot corresponding to this function. 
Function 1-4 


VNB_CONFIG memory is configured in one of two ways: 
. using data from an SPD ROM on the DIMM module in the selected DIMM slot, or 
* using an OEM configuration table memory definition entry. 


If the configuration is done using SPD ROM data, the SPD_CONFIG bit is set. If the configuration was done 
using OEM configuration table data, the OEM_CONFIG bit is set. 


If the VNB_CONFIG bit is clear for a given functions 1-4, corresponding to DIMM slots 0-3 respectively, those 
slots are either empty or have memory that is not usable. If a memory slot does not have an SPD ROM or an 
OEM configuration table memory definition, it can not be configured by the TM8000 VNB. 


Register Name | Addr Offset Size Access Default Value 

SD_STS 41h 8 Bits RO 00h 

Bit(s) | Name Access _ | Function Description 

7:3 -- RO Reserved 

2 OEM_CONFIG | RO Configured by OEM Config Data—Set to indicate that the SPD 


Data configuration registers have been configured with data from the 
OEM Config Table. 


1 SPD_CONFIG | RO SPD Data Valid—Set to indicate that valid SPD ROM data has been 
read from an SPD ROM on the selected DIMM module and placed in 
the SPD Data configuration registers in this function. 


0 VNB_CONFIG_ | RO TM8000 VNB Configured—When set the memory on this DIMM 


slot has been configured and committed by the TM8000 VNB. 
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sp_ERR SDRAM DIMM Slot Error Register 


42h 

; SDRAM DIMM slot error register. Hardwired to 0. 
Device 0 
Function 1-4 

Register Name | Addr Offset Size Access Default Value 

SD_ERR 42h 8 Bits RO 00h 

Bit(s) |Name | Access | Function Description 

7:0 ERR RO Error Code 

spp_AbpbR SPD ROM Address Register 
43h 
. This register is used, with SPD_DATA, to read or write SPD ROM data from the selected SDRAM DIMM 
Device 0 , ; ; ; : 
; module installed in the DIMM slot corresponding to device 0, function 1-4. 
Function 1-4 

The SPD_WRITE bit determines the type of transaction and affects the behavior of the SPD_DATA register 

as follows: 

° If SPD_WRITE is 0, the doubleword of SPD ROM data from the selected DIMM module at the offset 
specified by the ADDR field will be placed in the SPD_DATA register. 

* If SPD_WRITE is 1, this prepares the interface for a write to the SPD ROM. The SPD_DATA register 
becomes writable; data that is subsequently written to SPD_DATA will also be written to the SPD ROM in 
the doubleword addressed by the ADDR field. Writes to the SPD ROM are restricted to the range 
between and including byte 40h and the last byte of the ROM (but not exceeding FFh). 

The SPD ROM interface and data are described in greater detail in Chapter 4, Memory. 

Register Name | Addr Offset Size Access Default Value 

SPD_ADDR 43h 8 Bits RW 00h 

Bit(s) | Name Access_ | Function Description 

7:2 ADDR RW SPD ROM Address—This field contains the address of a DWORD in 
the SPD ROM to be read or written using the SPD_DATA register. 

1 RO Write Error—This bit indicates that an error resulted from an 
attempted SPD ROM write operation. This could be due to an invalid 
address, or an SMBUS error. 

0 SPD_WRITE | RW SPD Write—This bit selects between SPD ROM read and write 
operations. 

0: Read the addressed SPD ROM doubleword; cache the result in 
the SPD_DATA register. 
1: Prepare to write to the SPD ROM. 
spp_DATA SPD ROM Data Register 
44-47h 
Bevies a This register is used to read or write the DWORD of SPD ROM data from the selected DIMM module at the 
Eunction 4-4 offset in the SPD_ADDR register. Read operations read an entire doubleword. The size of writes to the SPD 


ROM are determined by the bytes actually written to SPD_DATA. 
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The first 64 bytes of SPD ROM data are read by the TM8000 boot code or TM8000 VNB code into the 
configuration registers 0x50 to Ox8F for each of the Device 0, Functions 1-4 that have a corresponding DIMM 
module with an SPD ROM installed. The remaining bytes in the SPD ROM can be read or written using the 
SPD_ADDR and SPD_DATA registers. 


For memory that is soldered down directly onto the main system board, the OEM is expected to put the 
memory type, sizing, and timing information in the OEM configuration table. This information is converted to 
the appropriate SPD ROM data format and stored in an unused Device 0, Function 1-4 configuration register 
area corresponding to an unused DIMM slot. The first byte in the SPD ROM data specifies the number of 
bytes that are recorded in the SPD ROM. The OEM configuration table derived data must have a 
ROM_DATA_SIZE and a ROM_SIZE of 64 indicating that no additional data is available. 


For any address in SPD_ADDR register greater than the ROM_SIZE, reads return all zeroes, and writes 
cause the WRITE_ERROR bit in SPD_ADDR to be set. The SPD ROM interface and data are described in 
greater detail in sections Chapter 4, Memory. 


Register Name | Addr Offset Size Access Default Value 
SPD_DATA 44-47h 32 Bits RW 0000 0000h 


Bit(s) | Name | Access | Function Description 


31:0 RW SPD ROM Data—Reads of this register return the DWORD read from the 
SPD ROM at the address in the SPD_ADDR register, if the SPD_WRITE bit 
in the SPD_ADDR register is 0. Writes to this register cause the data to be 
written to the SPD ROM at the address in the SPD_ADDR register, if the 
SPD_WRITE bit in the SPD_ADDR register is 1. 


pimm_size DIMM Module Size Register 
48-49h 


Device 0 
Function 1-4 


This read-only register is set when the memory configuration for a selected DIMM slot is COMMITTED. It 
contains the DIMM module or the soldered down memory size accessed in the DIMM slot corresponding to 
this function. For information about VNB_CONFIG, see SDRAM DIMM Slot Status Register on page 93. 


Value of 
Register Name | Addr Offset Size VNB_CONFIG | Access _ | Default Value 
DIMM_SIZE 48-49h 16 Bits 1 RO SPD ROM value 
0 RW 0000h 
Bit(s) | Name | Access | Function Description 
15:0 RO DIMM Module Size—The DIMM module size, in increments of 1 MB for the 
DIMM slot corresponding to this function. A size of 0 indicates an empty 
DIMM slot. 


MAX_FREQ_sPD Maximum Frequency by SPD ROM Register 


4Ch 
Device 0 The maximum memory frequency, as specified by this slots SPD t_ckmin value (from the SPD ROM or the 
Buncion id OEM configuration table—see OEM Configuration Table in the Code Morphing Software Guide). The value in 


this register may differ from slot to slot. 


Register Name Addr Offset Size Access Default Value 
MAX_FREQ_SPD 4Ch 8 Bits xx ROxx See description xx 
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Bit(s) | Access /| Function Description 


7:0 RW Maximum Memory Frequency as per SPD ROM—Integer value in units of 16.7 MHz. 


MAX_FREQ_oEm Maximum Frequency by OEM Config Table Register 


4Dh 
paves The maximum memory frequency, as specified in the OEM configuration table’s mem_freq_max field (see 
Enncion ta OEM Configuration Table in the Code Morphing Software Guide). This register reflects a system-level 


constraint, and thus contains the same value for each populated slot. 


Register Name Addr Offset Size Access Default Value 
MAX_FREQ_OEM | 4Dh 8 Bits RO See description 


Bit(s) | Access | Function Description 


7:0 RW Maximum Memory Frequency as per OEM Configuration Table—Integer value in 
units of 16.7 MHz. 


mMemory_FREQ Memory Frequency Register 


4Eh 
Havent The actual frequency at which the memory is being operated. All populated slots have the same value in this 
: register. 
Function 1-4 
Register Name Addr Offset Size Access Default Value 
MEMORY_FREQ 4Eh 8 Bits RO See description 


Bit(s) | Access | Function Description 


7:0 RW Memory Frequency—lInteger value in units of 16.7 MHz. 


rom_pata size SPD ROM Data Size Register 
50h 


Device 0 This description applies to the first 64 bytes of data read from the SPD ROM. For more information on SPD 
Function 1-4 and memory sizing, see Chapter 4, Memory. 


Value of 
Register Name Addr Offset | Size VNB_CONFIG | Access _| Default Value 
ROM_DATA_SIZE | 50h 8 Bits | 1 RO SPD ROM value 
0 RW 00h 


Bit(s) | Name | Access | Function Description 


7:0 RO, RW_ | SPD ROM Data Size—The number of bytes that have been recorded in the 
SPD ROM. This is typically 128 bytes if no OEM specific data is programmed. 


The value 0 is undefined, and the maximum supported total size is 256 bytes. 
The value in this register can have a maximum value of OxFF, which 
corresponds to 255 bytes. SPD ROM address offsets range from 0x00 to 
OxFF for the maximum total size of 256 bytes. 


96 Transmeta Proprietary Information Provided Under Nondisclosure Agreement TeA NSME TA ‘o 


TM8000 Programming and Configuration Guide 


August 19, 2003 


PRELIMINARY INFORMATION 


SUBJECT TO CHANGE 


Part 2: BIOS Programming 


Virtual Northbridge Configuration 


ROM_SIZE 
51h 


Device 0 
Function 1-4 


MEM_TYPE 
52h 


Device 0 
Function 1-4 


NUM_ROW_ADDR 
53h 


Device 0 
Function 1-4 


SPD ROM Total Size of ROM Register 


This description applies to the first 64 bytes of data read from the SPD ROM. For more information on SPD 
and memory sizing, see Chapter 4, Memory. 


Value of 
Register Name | Addr Offset Size VNB_CONFIG | Access _| Default Value 
ROM_SIZE 51h 8 Bits 1 RO SPD ROM value 
0 RW 00h 
Bit(s) |Name | Access | Function Description 
7:0 RO, RW_ | SPD ROM Total Size—The total ROM size in bytes. The value 0 is 
undefined; the maximum supported size is 256 bytes. 


SPD ROM SDRAM Memory Type Register 


This description applies to the first 64 bytes of data read from the SPD ROM. For more information on SPD 
and memory sizing, see Chapter 4, Memory. 


Value of 
Register Name | Addr Offset Size VNB_CONFIG | Access _ | Default Value 
MEM_TYPE 52h 8 Bits 1 RO SPD ROM value 
0 RW 00h 
Bit(s) | Name | Access | Function Description 
7:0 RO, RW _ | Memory Type—The TM8000 memory controller supports DDR-I and DDR-II 
SDRAM chips. 


SPD ROM Number of Row Addresses Register 


This description applies to the first 64 bytes of data read from the SPD ROM. For more information on SPD 
and memory sizing, see Chapter 4, Memory. 


Value of 
Register Name Addr Offset | Size VNB_CONFIG | Access _| Default Value 
NUM_ROW_ADDR | 53h 8 Bits 1 RO SPD ROM value 
0 RW 00h 
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Bit(s) | Name | Access | Function Description 


7:0 RO, RW _ | Number of Row Addresses—This register describes the row addressing on 
the module. 


If there is one physical bank on the module, or if there are two physical banks 
of the same size and organization, then bits 3:0 are used to represent the 
number of row addresses for each physical bank. 


If the module has two physical banks of different sizes, then bits 3:0 represent 
the number of row addresses for physical bank 1 and bits 7:4 represent the 
number of row addresses for physical bank 2. 


Note: the physical bank is selected using the Bank Address (BA) pins on 
DIMM modules. 


num_co._appR SPD ROM Number of Column Addresses Register 
54h 


Device 0 This description applies to the first 64 bytes of data read from the SPD ROM. For more information on SPD 
Function 1-4. and memory sizing, see Chapter 4, Memory. 


Value of 
Register Name Addr Offset | Size VNB_CONFIG | Access _| Default Value 
NUM_COL_ADDR | 54h 8 Bits 1 RO SPD ROM value 
0 RW 00h 


Bit(s) | Name | Access | Function Description 


7:0 RO, RW _ | Number of Column Addresses—tThis register describes the column 
addressing on the module. 


If there is one physical bank on the module or if there are two physical banks 
of the same size, then bits 3:0 are used to represent the number of column 
addresses for each physical bank. 


If the module has two physical banks of different sizes, then bits 3:0 represent 
the number of column addresses for physical bank 1 and bits 7:4 represent 
the number of column addresses for physical bank 2. 


NuM_PBANKS SPD ROM Physical Banks on DIMM Module Register 


55h 
: This description applies to the first 64 bytes of data read from the SPD ROM. For more information on SPD 
Device 0 d Ree Chanter 4: Mf 
Function 1-4 2d memory sizing, see Chapter 4, Memory. 
Value of 
Register Name | Addr Offset Size VNB_CONFIG | Access _| Default Value 
NUM_PBANKS | 55h 8 Bits 1 RO SPD ROM value 
0 RW 00h 


Bit(s) | Name | Access | Function Description 


7:0 RO, RW | Physical Banks—The number of physical banks on the DIMM module. This 
field describes the number of physical banks on the DIMM Module. This is 
different from the number of logical banks on the SDRAM memory chips, 
which are defined in configuration register NUM_LBANKS (page 102). 


98 Transmeta Proprietary Information Provided Under Nondisclosure Agreement TeA NSME TA ‘o 


TM8000 Programming and Configuration Guide 


August 19, 2003 


PRELIMINARY INFORMATION 


Part 2: BIOS Programming 


SUBJECT TO CHANGE Virtual Northbridge Configuration 


DATA_WIDTH 
56-57h 


Device 0 
Function 1-4 


VOLT_LEVEL 
58h 


Device 0 
Function 1-4 


T_cYyc 
59h 


Device 0 
Function 1-4 


SPD ROM DIMM Module Data Width Register 


This description applies to the first 64 bytes of data read from the SPD ROM. For more information on SPD 
and memory sizing, see Chapter 4, Memory. 


Value of 
Register Name | Addr Offset Size VNB_CONFIG | Access _ | Default Value 
DATA_WIDTH | 56-57h 16 Bits 1 RO SPD ROM value 
0 RW 0000h 
Bit(s) | Name | Access | Function Description 
15:0 RO, RW | Module Data Width—The DIMM module data width is specified in this 


register. The supported values are 64 bits if non-ECC SDRAM DIMM 
modules are used and 72 bits if ECC SDRAM DIMM modules are used. 


SPD ROM DIMM Voltage Interface Level Register 


This description applies to the first 64 bytes of data read from the SPD ROM. For more information on SPD 
and memory sizing, see Chapter 4, Memory. 


Value of 
Register Name | Addr Offset Size VNB_CONFIG | Access _ | Default Value 
VOLT_LEVEL | 58h 8 Bits 1 RO SPD ROM value 
0 RW 0000h 
Bit(s) | Name | Access | Function Description 
15:0 RO, RW | Voltage Interface Level—This register describes the DIMM module's voltage 
interface level. 


SPD ROM SDRAM Cycle Time Register 


This description applies to the first 64 bytes of data read from the SPD ROM. For more information on SPD 
and memory sizing, see Chapter 4, Memory. 


Value of 
Register Name | Addr Offset Size VNB_CONFIG | Access _| Default Value 
T_CYC 59h 8 Bits 1 RO SPD ROM value 
0 RW 00h 
Bit(s) |Name | Access | Function Description 
7:0 RO, RW | SDRAM Cycle Time—This register defines the minimum cycle time for the 


SDRAM device at the highest CAS latency, CAS Latency=X defined in 
configuration register 0x62 of this function. 


Bits 7:4 define the cycle time in nsec and bits 3:0 define the cycle time in 0.1 
nsec which is added to the nsec cycle time. 
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T_AC 


SAh 


Device 0 
Function 1-4 


CFG_TYPE 
5Bh 


Device 0 
Function 1-4 


REFRESH 
5Ch 


Device 0 
Function 1-4 


SPD ROM SDRAM Access from Clock Time Register 


This description applies to the first 64 bytes of data read from the SPD ROM. For more information on SPD 
and memory sizing, see Chapter 4, Memory. 


Value of 
Register Name | Addr Offset Size VNB_CONFIG | Access _ | Default Value 
T_AC 5Ah 8 Bits 1 RO SPD ROM value 
0 RW 00h 
Bit(s) | Name | Access | Function Description 
7:0 RO, RW _ | SDRAM Access from Clock Time—This register defines maximum clock to 


data out time (+/-) for the SDRAM device. This is the Clock to data out 
specification at the highest given CAS Latency=X defined in configuration 
register (page 103). 


Bits 7:4 define the access time in 0.1 nsec and bits 3:0 define the access time 
in 0.01 nsec which is added to the nsec access time. The resulting access 
time is the (+/-) time from the occurrence of the clock when the output data is 
available for access. 


SPD ROM DIMM Configuration Type Register 


This description applies to the first 64 bytes of data read from the SPD ROM. For more information on SPD 
and memory sizing, see Chapter 4, Memory. 


Value of 
Register Name | Addr Offset Size VNB_CONFIG | Access _| Default Value 
CFG_TYPE 5Bh 8 Bits 1 RO SPD ROM value 
0 RW 00h 
Bit(s) | Name | Access | Function Description 
7:0 RO, RW | DIMM Configuration Type—This register describes the DIMM module's 
error detection and/or correction scheme. The currently defined values are: 
0: None 
1: Parity 
2: ECC 


SPD ROM Refresh Rate/Type Register 


This description applies to the first 64 bytes of data read from the SPD ROM. For more information on SPD 
and memory sizing, see Chapter 4, Memory. 


Value of 
Register Name | Addr Offset Size VNB_CONFIG | Access _ | Default Value 
REFRESH 5Ch 8 Bits 1 RO SPD ROM value 
0 RW 00h 
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Bit(s) | Name | Access | Function Description 


7:0 RO, RW | Refresh Rate/Type—This register defines the DIMM module refresh rate and 
type. The types are self-refresh and normal refresh. The rates are normal, 
reduced and extended rates. 


DRAM_wiDTH SPD ROM Primary SDRAM Width Register 


5Dh 
Devi This description applies to the first 64 bytes of data read from the SPD ROM. For more information on SPD 
evice! and memory sizing, see Chapter 4, Memo 
Function 1-4 'y 9: P , 'Y- 

Value of 

Register Name | Addr Offset Size VNB_CONFIG | Access _ | Default Value 

DRAM_WIDTH | 5Dh 8 Bits 1 RO SPD ROM value 
0 RW 00h 


Bit(s) | Name | Access | Function Description 


7:0 RO, RW | Primary SDRAM Width—This register defines the primary data SDRAM 
width. Bits 6:0 define the primary data SDRAM width. The TM8000 supports 
x4, x8, x16 and x32 primary data widths. Bit 7 is 0 if only one physical bank is 
present, or if two physical banks with the same primary data widths are 
present on the DIMM module. Bit 7 is 1 if the second physical bank has a 
primary data width different from physical bank 1. The second physical bank 
width must be equal to or 2x physical bank 1. 


Ecc_wipTH SPD ROM ECC SDRAM Width Register 


5Eh 
: This description applies to the first 64 bytes of data read from the SPD ROM. For more information on SPD 
Device 0 d a Chapter 4. Mi 
Function 1-4 2nd memory sizing, see Chapter 4, Memory. 
Value of 
Register Name | Addr Offset Size VNB_CONFIG | Access _ | Default Value 
ECC_WIDTH 5Eh 8 Bits 1 RO SPD ROM value 
0 RW 00h 


Bit(s) | Name | Access | Function Description 


7:0 RO, RW | Error Checking SDRAM Width—lf the module incorporates error checking 
and if the primary data SDRAM do not include the error checking bits, then 
the error checking SDRAM width is defined by this register. Bits 6:0 define the 
error correcting SDRAM width. Bit 7 is 0 if only one physical bank is present 
or if two physical banks with the same error correcting width are present on 
the DIMM module. Bit 7 is a 1 if the second physical bank has an error 
correcting data width different from physical bank 1. The second physical 
bank width must be equal to or 2x physical bank 1. 


Tea NSME TA ‘o Transmeta Proprietary Information Provided Under Nondisclosure Agreement 101 


Part 2: BIOS Programming PRELIMINARY INFORMATION TM8000 Programming and Configuration Guide 
Virtual Northbridge Configuration SUBJECT TO CHANGE August 19, 2003 


BB_RND_CcoL SPD ROM Back-to-Back Random Col Access 
sFh_ Register 


Device 0 
Function 1-4 


This description applies to the first 64 bytes of data read from the SPD ROM. For more information on SPD 
and memory sizing, see Chapter 4, Memory. 


Value of 
Register Name | Addr Offset Size VNB_CONFIG | Access _ | Default Value 
BB_RND_COL | 5Fh 8 Bits 1 RO SPD ROM value 
0 RW 00h 


Bit(s) | Name | Access | Function Description 


7:0 RO, RW | Min Clock Delay, Back-to-Back Random Column Access—This register 
defines the minimum Clock Delay for back-to-back random column accesses. 


BURSTLEN SPD ROM SDRAM Burst Lengths Register 


60h 
, This description applies to the first 64 bytes of data read from the SPD ROM. For more information on SPD 
Bevis and memory sizing, see Chapter 4, Memo 
Function 1-4 my 9: P : a 
Value of 
Register Name | Addr Offset Size VNB_CONFIG | Access _| Default Value 
BURSTLEN 60h 8 Bits 1 RO SPD ROM value 
0 RW 00h 


Bit(s) | Name | Access | Function Description 


7:0 RO, RW | SDRAM Burst Lengths Supported—This register describes which various 
programmable burst lengths are supported by the SDRAM devices on the 
DIMM module. Burst lengths of 1, 2, 4 and 8 are defined. The bits 3:0 define a 
mask where if the bit is set the corresponding burst length is supported. If the 
bit is 0, the corresponding burst length is not supported. 


NuM_LBANKS SPD ROM Logical Banks on SDRAM Register 


61h 
. This description applies to the first 64 bytes of data read from the SPD ROM. For more information on SPD 
Device 0 d is Chapter 4. Ml 
Function 1-4 2nd memory sizing, see Chapter 4, Memory. 
Value of 
Register Name | Addr Offset Size VNB_CONFIG | Access _| Default Value 
NUM_LBANKS | 61h 8 Bits 1 RO SPD ROM value 
0 RW 00h 


Bit(s) | Name | Access | Function Description 


7:0 RO, RW _ | Number of Logical Banks—This register defines the number of logical 
banks are on each of the SDRAM chips installed on a DIMM module. 
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cas_taT SPD ROM CAS Latency Register 
62h 
Devi This description applies to the first 64 bytes of data read from the SPD ROM. For more information on SPD 
pviee 0 d memory sizing, see Chapter 4, Memo. 
Function 1-4 an 9; p : Sf 
Value of 
Register Name | Addr Offset Size VNB_CONFIG | Access _| Default Value 
CAS_LAT 62h 8 Bits 1 RO SPD ROM value 
0 RW 00h 


Bit(s) | Name | Access | Function Description 


7:0 RO, RW | CAS Latency Supported—This register describes which of the 
programmable CAS latencies are supported by the SDRAM DIMM module. 
The CAS latency ranges from 1 to 3.5, in 0.5 increments. The register defines 
a bit mask such that if the corresponding bit is set, then that CAS latency is 
supported on the module; if the bit is 0, then that CAS latency is not supported 
by the module. 


The highest CAS latency value supported is referred to as CAS Latency X. 
Some of the following registers refer to CAS Latency X-0.5 and CAS Latency 
X-1. 


cs tat SPD ROM CS Latency Register 


63h 
: This description applies to the first 64 bytes of data read from the SPD ROM. For more information on SPD 
Device 0 d ae Chapter 4. Mi 
Function 1-4 2nd memory sizing, see Chapter 4, Memory. 
Value of 
Register Name | Addr Offset Size VNB_CONFIG | Access _| Default Value 
CS_LAT 63h 8 Bits 1 RO SPD ROM value 
0 RW 00h 


Bit(s) | Name | Access | Function Description 


7:0 RO, RW | CS Latency Supported—This register describes which of the programmable 
CS latencies are supported by the SDRAM DIMM module. The CS latency 
ranges from 0 to 6 in increments of 1. The register defines a bit mask, where 
if the corresponding bit is set, then that CS latency is supported on the 
module and if the bit is 0, then that CS latency is not supported by the 
module. 


we_LatT SPD ROM Write Enable Latency Register 


64h 
: This description applies to the first 64 bytes of data read from the SPD ROM. For more information on SPD 
Beuice) and memory sizing, see Chapter 4, Memo 
Function 1-4 'y 9: P : 'Y- 
Value of 
Register Name | Addr Offset Size VNB_CONFIG | Access _ | Default Value 
WE_LAT 64h 8 Bits 1 RO SPD ROM value 
0 RW 00h 


TeA NSME TA ‘o Transmeta Proprietary Information Provided Under Nondisclosure Agreement 103 


Part 2: BIOS Programming PRELIMINARY INFORMATION TM8000 Programming and Configuration Guide 
Virtual Northbridge Configuration SUBJECT TO CHANGE August 19, 2003 


Bit(s) | Name | Access | Function Description 


7:0 RO, RW | WE Latency Supported—This register describes which of the programmable 
WE latencies are supported by the SDRAM DIMM module. The WE latency 
ranges from 0 to 3 in increments of 1. The register defines a bit mask, where 
if the corresponding bit is set, then that WE latency is supported on the 
module and if the bit is 0, then that WE latency is not supported by the 
module. 


mop_atries SPD ROM Module Attributes Register 
65h 


Device 0 This description applies to the first 64 bytes of data read from the SPD ROM. For more information on SPD 
Function 1-4. and memory sizing, see Chapter 4, Memory. 


Value of 
Register Name | Addr Offset Size VNB_CONFIG | Access _| Default Value 
MOD_ATTRIBS | 65h 8 Bits 1 RO SPD ROM value 
0 RW 00h 


Bit(s) | Name | Access | Function Description 


7:0 RO, RW | Module Attributes—This register describes various aspects of the module. It 
details various unrelated but critical elements pertinent to the module. 


Unless described otherwise, if set (1) the attribute is TRUE, if clear (0) the 
attribute is FALSE. 


Bit | Description 


Buffered Address and Control Inputs 


Registered Address and Control Inputs 
On-Card PLL (Clock) 

FET Switch On-Card Enable 

FET Switch External Enable 
Differential Clock Input 

Hardwired to 0 

Hardwired to 0 


N]| OD} oO] BR] Ww] mM] >A] oO 


cexartres SPD ROM General Attributes Register 
66h 


Device 0 This description applies to the first 64 bytes of data read from the SPD ROM. For more information on SPD 
Function 1-4 and memory sizing, see Chapter 4, Memory. 


Value of 
Register Name | Addr Offset Size VNB_CONFIG | Access _| Default Value 
GEN_ATTRIBS | 66h 8 Bits 1 RO SPD ROM value 
0 RW 00h 
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Bit(s) | Name 


Access 


Function Description 


7:0 


RO, RW 


SDRAM General Attributes—This register describes various aspects of the 
SDRAM chips on the DIMM module. It details various unrelated but critical 
elements pertinent to the SDRAM chips. 

Unless described otherwise, if set (1) the attribute is TRUE, if clear (0) the 
attribute is FALSE. 


Bit 


Description 


Includes Weak Driver 

Includes QFC Output 

Hardwired to 0 

Hardwired to 0 

Lower VDD tolerance: 0 = 0.2V, 1 = TBD 
Upper VDD tolerance: 0 = 0.2V, 1 = TBD 
Hardwired to 0 


N]| OD] oO} BR] wl] rms] =a} oO 


Supports Fast AP: 0 = T_RAP is T_RAS, 1 = T_RAP is T_ RCD 


miN_cL_x-0.5 SPD ROM Min CLK Latency X-0.5 Register 


67h 


Device 0 
Function 1-4 


MAX_CL_X-0.5 
68h 


Device 0 
Function 1-4 


This description applies to the first 64 bytes of data read from the SPD ROM. For more information on SPD 
and memory sizing, see Chapter 4, Memory. 


Value of 
Register Name | Addr Offset Size VNB_CONFIG | Access _ | Default Value 
MIN_CL_X-0.5 | 67h 8 Bits 1 RO SPD ROM value 
0 RW 00h 
Bit(s) | Name | Access | Function Description 
7:0 RO, RW | Minimum Clock Cycle Time at CLX-0.5—Minimum clock cycle time at 


specified CL X - 0.5. The highest CAS latency identified in the CAS Latency 
configuration register is X and the timing values associated with CAS latency 
X are found in the T_CYC configuration register. This register defines the 
minimum CAS Latency clock cycle time for X - 0.5 in nsec. 


SPD ROM Max Data Access Time at X-0.5 Register 


This description applies to the first 64 bytes of data read from the SPD ROM. For more information on SPD 
and memory sizing, see Chapter 4, Memory. 


Value of 
Register Name | Addr Offset Size VNB_CONFIG | Access _| Default Value 
MAX_CL_X-0.5 | 68h 8 Bits 1 RO SPD ROM value 
0 RW 00h 
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Bit(s) | Name | Access | Function Description 


7:0 RO, RW _ | Maximum Clock Cycle Time at CLX-0.5—Maximum clock cycle time at 
specified CL X - 0.5. The highest CAS latency identified in the CAS Latency 
configuration register is X and the timing values associated with CAS latency 
X are found in the T_CYC configuration register. This register defines the 
maximum CAS Latency clock cycle time for X - 0.5 in nsec. 


miIN_cL_X-- SPD ROM Min CLK Latency X-1 Register 


69h 
; This description applies to the first 64 bytes of data read from the SPD ROM. For more information on SPD 
Device 0 d ws Chapiard. A 
Function 1-4 2d memory sizing, see Chapter 4, Memory. 
Value of 
Register Name | Addr Offset Size VNB_CONFIG | Access _| Default Value 
MIN_CL_X-1 69h 8 Bits 1 RO SPD ROM value 
0 RW 00h 


Bit(s) | Name | Access | Function Description 


7:0 RO, RW | Minimum Clock Cycle Time at CLX-1—Minimum clock cycle time at 
specified CL X - 1. The highest CAS latency identified in the CAS Latency 
configuration register is X and the timing values associated with CAS latency 
X are found in the T_CYC configuration register. This register defines the 
minimum CAS Latency clock cycle time for X - 1 in nsec. 


mMAx_ct_x-1 SPD ROM Max Data Access Time at X-1 Register 


6Ah 
. This description applies to the first 64 bytes of data read from the SPD ROM. For more information on SPD 
Device 0 d A Chapter. i 
Function 1-4 2nd memory sizing, see Chapter 4, Memory. 
Value of 
Register Name | Addr Offset Size VNB_CONFIG | Access _| Default Value 
MAX_CL_X-1 6Ah 8 Bits 1 RO SPD ROM value 
0 RW 00h 


Bit(s) | Name | Access | Function Description 


7:0 RO, RW _ | Maximum Clock Cycle Time at CLX-1—Maximum clock cycle time at 
specified CL X - 1. The highest CAS latency identified in the CAS Latency 
configuration register is X and the timing values associated with CAS latency 
X are found in the T_CYC configuration register. This register defines the 
maximum CAS Latency clock cycle time for X - 1 in nsec. 
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ROW_PRECHRG 
6Bh 


Device 0 
Function 1-4 


T_RRD 
6Ch 


Device 0 
Function 1-4 


T_RCD 
6Dh 


Device 0 
Function 1-4 


SPD ROM Minimum Row Precharge Time Register 


This description applies to the first 64 bytes of data read from the SPD ROM. For more information on SPD 
and memory sizing, see Chapter 4, Memory. 


Value of 
Register Name Addr Offset | Size VNB_CONFIG | Access _| Default Value 
ROW_PRECHRG 6Bh 8 Bits 1 RO SPD ROM value 
0 RW 00h 
Bit(s) | Name | Access | Function Description 
7:0 T_RP | RO, RW | SDRAM Minimum Row Precharge Time—The SDRAM chips minimum row 


precharge time (in ns). 


SPD ROM Min Row to Row Active Delay Register 


This description applies to the first 64 bytes of data read from the SPD ROM. For more information on SPD 
and memory sizing, see Chapter 4, Memory. 


Value of 
Register Name | Addr Offset Size VNB_CONFIG | Access _ | Default Value 
T_RRD 6Ch 8 Bits 1 RO SPD ROM value 
0 RW 00h 
Bit(s) | Name Access_ | Function Description 
7:0 T_RRD_ | RO, RW | Minimum Row Active to Row Active Delay—This register defines the 


minimum required delay between row activations in nsec. 


SPD ROM Min RAS to CAS Delay Register 


This description applies to the first 64 bytes of data read from the SPD ROM. For more information on SPD 
and memory sizing, see Chapter 4, Memory. 


Value of 
Register Name | Addr Offset Size VNB_CONFIG | Access _ | Default Value 
T_RCD 6Dh 8 Bits 1 RO SPD ROM value 
0 RW 00h 
Bit(s) | Name Access _ | Function Description 
7:0 T_RCD_ | RO, RW | SDRAM Minimum RAS to CAS Delay—This register describes the 


minimum delay required between assertions of RAS and CAS in nsec. 
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Tras SPD ROM Min Active to Precharge Time Register 
6Eh 
Devi This description applies to the first 64 bytes of data read from the SPD ROM. For more information on SPD 
laa d memory sizing, see Chapter 4, Memo 
Function 1-4 aN ry 9; p ; i 
Value of 
Register Name | Addr Offset Size VNB_CONFIG | Access _ | Default Value 
T_RAS 6Eh 8 Bits 1 RO SPD ROM value 
0 RW 00h 


Bit(s) | Name Access _| Function Description 


7:0 T_RAS RO, RW _ | SDRAM Minimum RAS Active to Precharge Time—This register defines 
the minimum active to precharge time in nsec. 


pank_ensity SPD) ROM Module Bank Density Register 
6Fh 


Device 0 This description applies to the first 64 bytes of data read from the SPD ROM. For more information on SPD 
Function 1-4 and memory sizing, see Chapter 4, Memory. 


Value of 
Register Name Addr Offset Size VNB_CONFIG | Access _| Default Value 
BANK_DENSITY | 6Fh 8 Bits 1 RO SPD ROM value 
0 RW 00h 


Bit(s) | Name | Access | Function Description 


7:0 RO, RW _ | DIMM Module Bank Density—This register defines the physical bank 
densities on the DIMM module. The register is a bit mask with densities of 
1GB, 2Gb, 16MB, 32MB, 64MB, 128MB, 256MB, and 512MB. One bit is set 
for each different physical bank size on the DIMM module. 


ac_seEtuP SPD ROM Address and Cmd Setup Time Register 


70h 
: This description applies to the first 64 bytes of data read from the SPD ROM. For more information on SPD 
Device 0 d ee Chapter 4..M 
Function 1-4 2d memory sizing, see Chapter 4, Memory. 
Value of 
Register Name | Addr Offset Size VNB_CONFIG | Access _ | Default Value 
AC_SETUP 70h 8 Bits 1 RO SPD ROM value 
0 RW 00h 


Bit(s) | Name | Access | Function Description 


7:0 RO, RW | Address and Command Setup Time Before Clock—This register defines 
the input setup time before the rising edge of the clock at the SDRAM device 
on unbuffered modules, or at the register on registered modules. The time is 
in 0.1 nsec plus 0.01 nsec. 
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AC_HOLD 
71h 


Device 0 
Function 1-4 


D_SETUP 
72h 


Device 0 
Function 1-4 


D_HOLD 
73h 


Device 0 
Function 1-4 


SPD ROM Address and Cmd Hold Time Register 


This description applies to the first 64 bytes of data read from the SPD ROM. For more information on SPD 
and memory sizing, see Chapter 4, Memory. 


Value of 
Register Name | Addr Offset Size VNB_CONFIG | Access _| Default Value 
AC_HOLD 71h 8 Bits 1 RO SPD ROM value 
0 RW 00h 
Bit(s) |Name | Access | Function Description 
7:0 RO, RW | Address and Command Hold Time After Clock—This register defines the 


input hold time after the rising edge of the clock at the SDRAM device on 
unbuffered modules, or at the register on registered modules. The time is in 
0.1 nsec plus 0.01 nsec. 


SPD ROM Data Setup Time Register 


This description applies to the first 64 bytes of data read from the SPD ROM. For more information on SPD 
and memory sizing, see Chapter 4, Memory. 


Value of 
Register Name | Addr Offset Size VNB_CONFIG | Access _ | Default Value 
D_SETUP 72h 8 Bits 1 RO SPD ROM value 
0 RW 00h 
Bit(s) | Name | Access | Function Description 
7:0 RO, RW | Data/Data Mask Input Setup Time Before Data Strobe—This register 


defines the input setup time before the rising or falling edge of the Data 
Strobe. The time is in 0.1 nsec plus 0.01 nsec. 


SPD ROM Data Hold Time Register 


This description applies to the first 64 bytes of data read from the SPD ROM. For more information on SPD 
and memory sizing, see Chapter 4, Memory. 


Value of 
Register Name | Addr Offset Size VNB_CONFIG | Access _| Default Value 
D_HOLD 73h 8 Bits 1 RO SPD ROM value 
0 RW 00h 
Bit(s) | Name | Access | Function Description 
7:0 RO, RW | Data/Data Mask Input Hold Time After Data Strobe—This register defines 


the input hold time after the rising or falling edge of the Data Strobe. The time 
is in 0.1 nsec plus 0.01 nsec. 
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vcsprAM SPD ROM Reserved for VCSDRAM Register 
74-78h 
Device 0 For more information on SPD and memory sizing, see Chapter 4, Memory. 
Function 1-4 
Value of 
Register Name | Addr Offset Size VNB_CONFIG | Access _| Default Value 
VCSDRAM 74-78h 8 Bits x 4 | 1 RO SPD ROM value 
0 RW 00h 
Bit(s) | Name | Access | Function Description 
7:0 RO, RW | Reserved—These registers are reserved for Virtual Channel SDRAM. 
tTRc SPD ROM Min Active to Auto-Refresh Time Register 
79h 
F This description applies to the first 64 bytes of data read from the SPD ROM. For more information on SPD 
Device 0 d fae Chapter 4. M 
Function 1-4 2d memory sizing, see Chapter 4, Memory. 
Value of 
Register Name | Addr Offset Size VNB_CONFIG | Access _ | Default Value 
T_RC 79h 8 Bits 1 RO SPD ROM value 
0 RW 00h 
Bit(s) | Name | Access | Function Description 
7:0 RO, RW_ | SDRAM Minimum Active to Active/Auto-Refresh Command Time—This 
register defines the minimum Active to Active or Auto-Refresh Command 
Time in clock cycles. 
tTRF¢c SPD ROM Min Auto-Refresh to Cmd Time Register 
7Ah 
, This description applies to the first 64 bytes of data read from the SPD ROM. For more information on SPD 
Device 0 d Se Chaniava M 
Function 1-4 2d memory sizing, see Chapter 4, Memory. 
Value of 
Register Name | Addr Offset Size VNB_CONFIG | Access _ | Default Value 
T_RFC 7Ah 8 Bits 1 RO SPD ROM value 
0 RW 00h 
Bit(s) | Name | Access | Function Description 
7:0 RO, RW_ | SDRAM Minimum Auto-Refresh to Active/Auto-Refresh Command 
Time—tThis register defines the minimum Auto-Refresh to Active or Auto- 
Refresh Command Time in clock cycles. 
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Tmax_ck SPD ROM Max Cycle Time Register 
7Bh 


This description applies to the first 64 bytes of data read from the SPD ROM. For more information on SPD 


Device 0 is 
Function 1-4 and memory sizing, see Chapter 4, Memory. 
Value of 
Register Name | Addr Offset Size VNB_CONFIG | Access _| Default Value 
T_MAX_CK 7Bh 8 Bits 1 RO SPD ROM value 
0 RW 00h 
Bit(s) | Name | Access | Function Description 
7:0 RO, RW_ | SDRAM Maximum Device Cycle Time—This register defines the maximum 
SDRAM device cycle time in nsecs. The value OxFF defines no maximum 
cycle time. 


T.mMAx_pasa SPD ROM Max DQS-DQ Skew Time Register 


7Ch 
This description applies to the first 64 bytes of data read from the SPD ROM. For more information on SPD 


Device 0 a 
Euncton td and memory sizing, see Chapter 4, Memory. 
Value of 
Register Name | Addr Offset Size VNB_CONFIG | Access _ | Default Value 
T_MAX_DQSQ | 7Ch 8 Bits 1 RO SPD ROM value 
0 RW 00h 


Bit(s) | Name | Access | Function Description 


7:0 RO, RW | DDR SDRAM DQS-DQ Skew for DQS and Associated DQ Signals—This 
register defines the maximum skew between DQS and all DQ signals for each 
SDRAM device in hundreths of nsecs. 


tats SPD ROM Max Read Data Hold Skew Time Register 


7Dh 
F This description applies to the first 64 bytes of data read from the SPD ROM. For more information on SPD 
Device 0 d nie Chapter 4. Mf 
Function 1-4 2d memory sizing, see Chapter 4, Memory. 
Value of 
Register Name | Addr Offset Size VNB_CONFIG | Access _| Default Value 
T_QHS 7Dh 8 Bits 1 RO SPD ROM value 
0 RW 00h 


Bit(s) | Name | Access | Function Description 


7:0 RO, RW_ | DDR SDRAM Data Hold Skew Factor—This register defines the maximum 
skew factor used in the calculation of read data hold time from edges of DQS 
in tenths of nsecs. 
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suPERSET SPD ROM Reserved for Superset Info Register 
7E-8Dh 
Deviee’d For more information on SPD and memory sizing, see Chapter 4, Memory. 
Function 1-4 
Value of 
Register Name | Addr Offset | Size VNB_CONFIG | Access _| Default Value 
SUPERSET 7E-8Dh 8 Bits x 16 1 RO SPD ROM value 
0 RW 00h 
Bit(s) | Name | Access | Function Description 
7:0 RO, RW | Superset Information—These registers are reserved for a backward 
compatible superset technology if one is developed. 
spp_REV SPD ROM DIMM SPD ROM Revision Register 
8Eh 
' This register defines the SPD revision of the SPD ROM on this DIMM Module. For more information on SPD 
Bove and memory sizing, see Chapter 4, Memo 
Function 1-4 'y 9 P : "Y: 
Value of 
Register Name | Addr Offset Size VNB_CONFIG | Access _ | Default Value 
SPD_REV 8Eh 8 Bits 1 RO SPD ROM value 
0 RW 00h 
Bit(s) | Name Access _ | Function Description 
7:0 SPD_REV | RO, RW | SPD Revision—Serial Presence Detect (SPD) ROM revision. 
cksum SPD ROM Checksum Register 
8Fh 
Device 0 For more information on SPD and memory sizing, see Chapter 4, Memory. 
Function 1-4 
Value of 
Register Name | Addr Offset Size VNB_CONFIG | Access _ | Default Value 
CKSUM 8Fh 8 Bits 1 RO SPD ROM value 
0 RW 00h 
Bit(s) | Name | Access | Function Description 
7:0 RO, RW _ | Checksum Byte—This register contains the checksum byte which is the sum 
of the bytes 0 to 62 in the SPD ROM. The checksum is the sum modulo 256. 
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BSPAD[21:0] 
A8-FFh 


Device 0 
Function 1-4 


BIOS Scratch Pad Register 


This block of 22 DWORD registers provide an extended general-purpose read/write register bank for the 
BIOS to perform the configuration routine. The BIOS can access these registers through the normal PCI 


configuration register mechanism, accessing 1, 2 or 4 bytes in every data access. 


Register Name | Addr Offset Size Access Default Value 
BSPAD[21:0] A8-FFh 32 Bitsx 22 | RW 0000 0000h 

Bit(s) |Name | Access | Function Description 

31:0 RW Extended BIOS Workspace—Initialized to 0000 0000h after reset. 


6.2.3 
(Device 1) 


AGP Host Bridge Configuration Registers 


AGP Host Bridge Configuration Registers are summarized in the following table in order by PCI address 
space offset. Detailed explanations of these registers are shown in the sections following the table. 


Table 11: AGP Host Bridge Configuration Registers (Dev 1, Fn 0) Summary 
Description Reg Name Addr Size Access Default Value | Pg 
Vendor Identification Register VID1 00-01h 16 Bits | RO 1279h 114 
Device Identification Register DID1 02-03h 16 Bits | RO 0061h 114 
Command Register CMD1 04-05h 16 Bits | RO 0000h 114 
Status Register STS1 06-07h 16 Bits | RO 0000h 115 
Revision Identification Register RID1 08h 8 Bits | RO 00h 115 
Programming Interface Register PI1 09h 8 Bits | RO 00h 116 
Sub-Class Code Register SUBC1 OAh 8 Bits | RO 04h 116 
Base Class Code Register BCC1 OBh 8 Bits | RO 06h 116 
Cache Line Size Register CLS1 0Ch 8 Bits | RO 00h 116 
Master Latency Timer Register MLT1 ODh 8 Bits | RO 00h 117 
Header Type Register HDR1 OEh 8 Bits | RO 01h 117 
Built-In Self Test Register BIST1 OFh 8 Bits | RO 00h 117 
Reserved 10-17h 
Primary Bus Number Register PBUSN 18h 8 Bits | RO 00h 117 
Secondary Bus Number Register SBUSN 19h 8 Bits | RW 00h 118 
Subordinate Bus Number Register SUBUSN 1Ah 8 Bits | RW 00h 118 
Secondary Master Latency Timer Register SMLT 1Bh 8 Bits | RW 00h 118 
I/O Base Address Register IOBASE 1Ch 8 Bits | RW FOh 119 
I/O Limit Address Register IOLIMIT 1Dh 8 Bits | RW 00h 119 
Secondary PCI-to-PCl Status Register SSTS 1E-1Fh 16 Bits | RO, RWC | 02A0h 119 
Memory Base Address Register MBASE 20-21h 16 Bits | RAW FFFOh 120 
Memory Limit Address Register MLIMIT 22-23h 16 Bits | RAW 0000h 120 
Prefetchable Memory Base Address Register PMBASE 24-25h 16 Bits | R/V FFFOh 120 
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Table 11: AGP Host Bridge Configuration Registers (Dev 1, Fn 0) Summary (Continued) 
Description Reg Name Addr Size Access Default Value | Pg 
Prefetchable Memory Limit Address Register PMLIMIT 26-27h 16 Bits | RW 0000h 121 
Reserved 28-33h 
Capabilities Pointer Register CAPPTR 34h 8 Bits | RO 00h 121 
Reserved 35-3Dh 
PCl-to-PCl Bridge Control Register BCTRL 3Eh 8 Bits | R/W 80h 121 
Reserved 3F-FFh 
vio1 Vendor Identification Register 
00-01h 
: The VID1 register contains the vendor identification number. This register, in combination with the DID 
Device 1 f : : i 
: register, uniquely identifies the TM8000. 
Function 0 
Register Name Addr Offset Size Access Default Value 
VID1 00-01h 16 Bits RO 1279h 
Bit(s) | Name | Access | Function Description 
15:0 VID RO Vendor Identification Number—This 16-bit value is the PCI vendor 
identification number assigned to Transmeta. Transmeta VID = 1279h. 
pip1 Device Identification Register 
02-03h 
Device 4 The DID1 register contains the device identification number for the AGP bridge. 
Function 0 
Register Name Addr Offset Size Access Default Value 
DID1 02-03h 16 Bits RO 0061h 
Bit(s) | Name | Access Function Description 
15:0 DID RO Device Identification Number—This 16-bit value is the identification 
number assigned to the AGP bridge, TM8000 VNB Device 1. 
Transmeta AGP bridge = 0061h 
cmp1 Command Register 
04-05h 
, PCI command register. This register controls no hardware and is provided primarily for compatibility with the 
Device 1 : seen dos 
3 PCI-PCI bridge specification. 
Function 0 
Register Name | Addr Offset Size Access Default Value 
CMD1 04-05h 16 Bits RO 0000h 
Bit(s) | Name Access _ | Function Description 
15:10 | -- RO Reserved 
9 FB2BC RO Fast Back-to-Back—Hardwired to 0. 
8 SERRE | RO SERR# Enable—Hardwired to 0. 
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STS1 
06-07h 


Device 1 
Function 0 


RID1 
08h 


Device 1 
Function 0 


Bit(s) | Name Access _ | Function Description 

7 ADSTEP | RO Address/Data Stepping—Hardwired to 0. 

6 PERRE | RO Parity Error Enable—Hardwired to 0. 

5 VPS RO Video Palette Snooping—Hardwired to 0. 

4 MWIE RO Memory Write and Invalidate Enable—Hardwired to 0. 
3 SCE RO Special Cycle Enable—Hardwired to 0. 

2 BME RO Bus Master Enable—Hardwired to 0. 

1 MSE RO Memory Space Enable—Hardwired to 0. 

0 IOSE RO 1/0 Space Enable—Hardwired to 0. 


Status Register 


PCI status register. 


Register Name | Addr Offset Size Access Default Value 
STS1 06-07h 16 Bits RO 0000h 

Bit(s) | Name Access _ | Function Description 

15 DPE RO Detected Parity Error—Hardwired to 0. 

14 SSE RO Signalled System Error—Hardwired to 0. 

13 RMAS RO Received Master Abort Status—Hardwired to 0. 
12 RTAS RO Received Target Abort Status—Hardwired to 0. 
11 STAS RO Signalled Target Abort Status—Hardwired to 0. 
10:9 DEVT RO DEVSEL# Timing—Hardwired to 0. 

8 DPD RO Data Parity Detected—Hardwired to 0. 

7 FB2BS RO Fast Back-to-Back—Hardwired to 0. 

6 UDF RO User Defined Format—Hardwired to 0. 

5 66C RO 66MHz PCI Capable—Hardwired to 0. 

4 CL RO Capabilities List—Hardwired to 0, indicating no capabilities linked list. 
3:0 -- RO Reserved 


Revision Identification Register 


The RID1 register contains the TM8000 AGP bridge revision identification number. 


Register Name Addr Offset Size Access Default Value 

RID1 08h 8 Bits RO 00h 

Bit(s) | Name | Access Function Description 

7:0 RID RO Revision Identification Number This 8-bit value is the revision 


identification number assigned to the TM8000 host-to-HT bridge. 
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PI1 
09h 


Device 1 
Function 0 


SUBC1 
OAh 


Device 1 
Function 0 


BCC1 
OBh 


Device 1 
Function 0 


CLS1 
OCh 


Device 1 
Function 0 


Programming Interface Register 


The PI1 register always returns O for the AGP bridge class code, indicating that no special programming 
interface definition exists for this function. 


Register Name Addr Offset Size Access Default Value 
PI1 09h 8 Bits RO 00h 
Bit(s) | Name Access _ | Function Description 


7:0 PGIF1 RO Programming Interface—This read-only field always returns 0, indicating 
that none of the function 0 subclasses have further division into 


programming interfaces. 


Sub-Class Code Register 


Sub-Class Code for the TM8000 VNB device 1. The HyperTransport specification defines all bridges that 
have primary connections to the HT bus and secondary connections to other bus protocols as being PCI to 
other bus protocol bridges. The AGP bus conforms to a 66 MHz PCI bus with extensions, so this is a PCI-PCl 
bridge. For more information, see PCI Hardware and Software-Architecture and Design (4th ed.), by Edward 
Solari and George Willse, Annabooks, San Diego, 1998, p.562. 


Register Name Addr Offset Size Access Default Value 

SUBC1 OAh 8 Bits RO 04h 

Bit(s) | Name Access _| Function Description 

7:0 SUBC1 RO Sub-Class Code—This 8-bit value indicates the category type for the 
TM8000 host-to-HT bridge. 04h indicates a PCl-to-PClI bridge device. 


Base Class Code Register 


The BCC1 register contains the TM8000 device 1 base class code. O6h indicates a bridge device. 


Register Name Addr Offset Size Access Default Value 

BCC1 OBh 8 Bits RO 06h 

Bit(s) | Name Access_ | Function Description 

7:0 BASEC1 | RO Base Class Code—This 8-bit value indicates the base class code for the 
TM8000 PCI bridge. 06h indicates a bridge device. 


Cache Line Size Register 


Cache line size register. This register is not implemented in device 1. 


Register Name 


Addr Offset 


Size 


Access 


Default Value 


CLS1 


O0Ch 


8 Bits 


RO 


00h 
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MLT1 
ODh 


Device 1 
Function 0 


HDR1 
OEh 


Device 1 
Function 0 


BIST1 
OFh 


Device 1 
Function 0 


PBUSN 
18h 


Device 1 
Function 0 


Bit(s) 


Name 


Access 


Function Description 


7:0 


CLS 


RO 


Cache Line Size—Hardwired to 0. 


Master Latency Timer Register 


Master latency timer register. This register is not implemented in device 1. 


Register Name Addr Offset Size Access Default Value 
MLT1 ODh 8 Bits RO 00h 

Bit(s) | Name Access _ | Function Description 

7:0 MLTC RO Master Latency Timer Count Value—Hardwired to 0. 


Header Type Register 


The HDR1 register defines the TM8000 device 1 configuration space header layout. 


Register Name Addr Offset Size Access Default Value 

HDR1 OEh 8 Bits RO Oth 

Bit(s) | Name Access_ | Function Description 

7 MFD1 RO Multi-Function Device—This bit returns 1, indicating that this device 
supports only function 0. 

6:0 HEADT1 | RO Header Type—This value always returns 1, indicating a PCI-to-PClI bridge 
header type. 


Built-In Self Test Register 


Built-in self test register. This TM8000 VNB does not have a built-in self test. 


Register Name Addr Offset Size Access Default Value 
BIST1 OFh 8 Bits RO 00h 

Bit(s) | Name Access_ | Function Description 

7:0 -- RO Reserved—Hardwired to 0. 


Primary Bus Number Register 

This register identifies that the AGP PCl-to-PCl bridge is connected to bus 0. 
Register Name Addr Offset Size Access Default Value 
PBUSN 18h 8 Bits RO 00h 
Bit(s) | Name Access _| Function Description 
7:0 RW Primary Bus Number—Hardwired to 0. 
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SBUSN 
19h 


Device 1 
Function 0 


SUBUSN 
1Ah 


Device 1 
Function 0 


SMLT 
1Bh 


Device 1 
Function 0 


Secondary Bus Number Register 


This register identifies the bus number assigned to the secondary bus side of the AGP PCI-to-PClI bridge. 
This bus number is programmed by PCI configuration software to allow mapping of configuration cycles to 
AGP. 


Register Name Addr Offset Size Access Default Value 

SBUSN 19h 8 Bits RW 00h 

Bit(s) | Name Access _| Function Description 

7:0 RW Secondary Bus Number—Programmed by configuration software. 


Subordinate Bus Number Register 


This register identifies the subordinate bus number (if any) that resides at the level below AGP. This bus 
number is programmed by the PCI configuration software to allow mapping of configuration cycles to AGP. 


Normally there is only an AGP graphics device connected to the AGP port, so the SBUSN and SUBUSN 
registers are programmed to the same value. In the case where a PCI-to-PCI bridge device is connected to 
the AGP port device, there may be one or more subordinate PCI buses on the secondary side of the external 
PCI bridge device. In this case, the SUBUSN register must be programmed to the highest numbered bus on 
the secondary side of the external PCI bridge. 


The PCI configuration software does a depth first search for new devices and assigns bus numbers 
sequentially as the new subordinate buses are found. The AGP bridge accepts all type-1 configuration cycles 
in the inclusive range specified by SBUSN and SUBUSN. Type-1 configuration cycles that have a bus 
number equal to SBUSN are converted to type-0 configuration cycles for the PCI device directly connected to 
the AGP port. All other type-1 configuration cycles with bus numbers between SBUSN + 1 and SUBUSN are 
sent out over the AGP bus unmodified as type-1 configuration cycles. 


Register Name Addr Offset Size Access Default Value 

SUBUSN 1Ah 8 Bits RW 00h 

Bit(s) | Name Access _ | Function Description 

7:0 RW Subordinate Bus Number—Programmed by configuration software. 


Secondary Master Latency Timer Register 


This register controls the secondary bus master latency timing on the AGP bus. It specifies the amount of 
time (in PCI clocks) that the VNB's AGP controller, as a bus master, can perform burst transfers if another 
master requests the bus. 


Register Name Addr Offset Size Access Default Value 
SMLT 1Bh 8 Bits RW 00h 

Bit(s) | Name Access _ | Function Description 

7:0 RO Secondary MLT Counter Value—The default is 0. 
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IOBASE 
1Ch 


Device 1 
Function 0 


IOLIMIT 
1Dh 


Device 1 
Function 0 


SSTS 
1E-1Fh 


Device 1 
Function 0 


I/O Base Address Register 


This register controls the CPU-to-AGP I/O access routing based on the following formula: 


IOBASE <= I/O address <= IOLIMIT 


Register Name Addr Offset Size Access Default Value 

IOBASE 1Ch 8 Bits RW FOh 

Bit(s) | Name Access_ | Function Description 

7:4 RW I/O Address Base—Corresponds to A[15:12] of the I/O address. The 
default is Fh. 

3:0 -- RO Reserved 


I/O Limit Address Register 


This register controls the CPU-to-AGP I/O access routing based on the following formula: 


IOBASE <= I/O address <= IOLIMIT . 


Register Name Addr Offset Size Access Default Value 

IOLIMIT 1Dh 8 Bits RW 00h 

Bit(s) | Name Access_ | Function Description 

7:4 RW 1/0 Address Limit—Corresponds to A[15:12] of the I/O address. The 
default is Oh. 

3:0 -- RO Reserved—Only 16-bit addressing is supported. 


Secondary PCI-to-PCI Status Register 


SSTS is a 16-bit status register that reports the occurrence of error conditions associated with the secondary 
side of the AGP PCI-to-PCl bridge in the TM8000 VNB. 


Register Name Addr Offset Size Access Default Value 
SSTS 1E-1Fh 16 Bits RO, RWC 02A0h 
Bit(s) | Name | Access | Function Description 
15 DPE RO Detected Parity Error—This bit is hardwired to 0. 
14 SSE1 | RO Received System Error—This bit is hardwired to 0. 
13 RMAS | RWC Received Master Abort Status— 
0: Software resets this bit to 0 by writing a 1 to it. 
1: TM8000 VNB terminates a Host-to-AGP with an unexpected master abort. 
12 RTAS | RWC Received Target Abort Status— 
0: Software resets this bit to 0 by writing a 1 to it. 
1: TM8000 VNB initiated transaction on AGP is terminated with a target abort. 
11 STAS | RO Signaled Target Abort Status—This bit is hardwired to 0. 
10:9 DEVT | RO DEVSEL# Timing—This field is hardwired to 01b for medium timing. 
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Bit(s) | Name | Access | Function Description 
8 DPD1 | RO Data Parity Detected—This bit is hardwired 0 
7 FB2B1 | RO Fast Back-to-Back—This bit is hardwired to 1. 
6 -- RO Reserved —This bit is hardwired to 0. 
5 66C RO 66 MHz PCI Capable—This bit is hardwired to 1 
4:0 -- RO Reserved —These bits are hardwired to 0. 


mBAsE Memory Base Address Register 
20-21h 


Device 1 
Function 0 


This register controls the CPU to AGP non-prefetchable memory access routing based on the following 
formula: 


MEMORY_BASE <= memory address <= MEMORY_LIMIT 


This register must be initialized by the configuration software. 


Register Name Addr Offset Size Access Default Value 

MBASE 20-21h 16 Bits R/W FFFOh 

Bit(s) | Name Access_ | Function Description 

15:4 RW Memory Address Base—Corresponds to A[31:20] of the memory 
address. Default is FFFOh 

3:0 -- RO Reserved 


mumit Memory Limit Address Register 
22-23h 


Device 1 
Function 0 


This register controls the CPU to AGP non-prefetchable memory access routing based on the following 
formula: 


MEMORY_BASE <= memory address <= MEMORY_LIMIT 


This register must be initialized by the configuration software . 


Register Name Addr Offset Size Access Default Value 
MLIMIT 22-23h 16 Bits R/W 0000h 


Bit(s) | Name Access _| Function Description 


15:4 RW Memory Address Limit—Corresponds to A[31:20] of the memory 
address. Default is 0000h. 


3:0 -- RO Reserved 


pmBasE Prefetchable Memory Base Address Register 


24-25h 
havies4 This register controls the CPU to AGP prefetchable memory access routing based on the following formula: 
muneeond PREFETCHABLE_MEMORY_BASE <= memory address <= PREFETCHABLE_MEMORY_LIMIT 
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PMLIMIT 
26-27h 


Device 1 
Function 0 


CAPPTR 
34h 


Device 1 
Function 0 


BCTRL 
3Eh 


Device 1 
Function 0 


This register must be initialized by the configuration software. 


Register Name Addr Offset Size Access Default Value 

PMBASE 24-25h 16 Bits R/W FFFOh 

Bit(s) | Name Access _ | Function Description 

15:4 RW Prefetchable Memory Address Base—Corresponds to A[31:20] of the 
memory address. Default is FFFOh 

3:0 -- RO Reserved 


Prefetchable Memory Limit Address Register 


This register controls the CPU to AGP prefetchable memory access routing based on the following formula: 


PREFETCHABLE_MEMORY_BASE <= memory address <= PREFETCHABLE_MEMORY_LIMIT 


This register must be initialized by the configuration software. 


Register Name Addr Offset Size Access Default Value 

PMLIMIT 26-27h 16 Bits R/W 0000h 

Bit(s) | Name Access _| Function Description 

15:4 RW Prefetchable Memory Address Limit—Corresponds to A[31:20] of the 
memory address. Default is O000h 

3:0 -- RO Reserved 


Capabilities Pointer Register 


Pointer to capabilities linked list, if one exists. 


Register Name Addr Offset Size Access Default Value 

CAPPTR 34h 8 Bits RO 00h 

Bit(s) | Name Access _ | Function Description 

7:0 -- RO Pointer to the start of capabilities linked list—This field is hardwired to 
00h, indicating a null capabilities linked list. 


PCl-to-PCI Bridge Control Register 


This register provides extensions to the PCICMD1 register that are specific to PCl-to-PCl bridges. The 
BCTRL register provides additional control for the secondary AGP interface as well as some bits that affect 
the overall behavior of the AGP PCI-to-PCI bridge in the TM8000 VNB. 


Register Name 


Addr Offset 


Size Access Default Value 


BCTRL 


3Eh 


8 Bits R/W 80h 
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Bit(s) | Name Access _ | Function Description 
7 RO Fast Back to Back Enable—This bit is hardwired to 1. 
6 RO Secondary Bus Reset—This bit is hardwired to 0. 


NOTE: The only way to perform a hard reset of the AGP is via the system 
reset, either initiated by software or hardware by the southbridge. 


5 RO Master Abort Mode—This bit is hardwired to 0. (This means when acting 
as a master on AGP, the TM8000 VNB drops writes and returns all 1's 
during reads when it receives a master abort). 


4 -- RO Reserved —This bit is hardwired to 0. 


3 RW VGA Enable—Corntrols the routing of CPU-initiated transactions targeting 
VGA compatible I/O and memory address ranges. 


1: The TM8000 VNB forwards the following CPU accesses to AGP: 


- memory accesses in the range A0000h to BFFFFh 

- 1/0 accesses where A[9:0] are in the ranges 3BOh to 3BBh and 
3COh to 3DFh (inclusive of ISA address aliases - A[15:10] are not 
decoded) 


When this bit is set, forwarding of these accesses issued by the CPU 
are independent of the I/O address and memory ranges defined by the 
previously defined base and limit registers. Forwarding of these 
accesses is also independent of the settings of bit 2 (ISA Enable) of 
this register or of bit 5 (VGA Palette Snoop Enable) of the PCICMD1 
register (see Command Register on page 114) if this bit is 1. 


0: VGA compatible memory and I/O range accesses are mapped to the 
HT bus. This is the default reset setting. Addresses mapped to AGP 
using the I/O and memory range registers defined above (IOBASE, 
IOLIMIT, MBASE, MLIMIT, PMBASE, PMLIMIT) are not affected by 
this bit. 


When this bit is set, the MDAP bit in the NBCFG register (page 60) can be 
used to route the addresses from BOO00h to B7FFFh to the HT bus so they 
can be forwarded to an MDA card. The MDAP bit also routes the I/O 
addresses 3B4h, 3B5h, and 3B8h to 3BBh to the HT bus. 


2 RW ISA Enable—Modifies the response by the TM8000 VNB to an I/O access 
issued by the CPU that target ISA I/O addresses. This applies only to I/O 
addresses that are enabled by IOBASE and IOLIMIT registers. 


1: When this bit is set to 1, the TM8000 VNB does not forward to AGP 
any I/O transactions addressing the last 768 bytes in each 1KB block, 
even if the addresses are within the range defined by the IOBASE and 
IOLIMIT registers. Instead of going to AGP, these cycles are forwarded 
to PCI, where they can be subtractively or positively claimed by the 
ISA bridge. 


0: All addresses defined by IOBASE and IOLIMIT for CPU I/O 
transactions are mapped to AGP. (default) 


1 -- RO Reserved —This bit is hardwired to 0. 
0 RO Parity Error Response Enable—This bit is hardwired to 0. 
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Chapter 7 


Processor and 
Frequency Detection 


The recommended method of processor detection for the Astro TM8000 processor is to use the CPUID 
instruction. Before executing CPUID, the ID bit in the EFLAGS register should be tested. The TM8000 ID bit 
can be modified which indicates that the processor supports the CPUID instruction. 


String Representation 


Several CPUID function codes return character strings. These strings have the common properties described 


below. 
Character set For maximum compatibility, Transmeta uses only the most universal subset of 
ASCII for string values: the Unique Graphics Characters of ISO 646:1991 and 
ECMA-6 (the latter is available from http://www.ecma.ch). 
Zero fill CPUID function codes that return string data specify the size for each string. 


Unused characters are filled with a value of OOh. 


Null termination not | The entire reserved size of the string may be taken up with printable characters; 
guaranteed nulls are only present if required for fill. Thus, programs should not assume these 
are null-terminated strings, even if they appear to be null-terminated for a 
particular chip revision. 


String fragment Strings returned by CPUID functions are broken up into fragments in order to 
order present the data in the CPUID output registers EAX, EBX, ECX, EDX. Thus, you 
must know the intended order of these fragments in order to reassemble them into 
the desired string. Transmeta uses two distinct orderings, as shown in the table 
below: one for strings that fit into three registers, and one for longer strings. 


Note 


These properties apply only to Transmeta-supplied defaults. Programmable strings may deviate from this 
description. 


Table 12: String Fragment Order for Strings Returned by CPUID Functions 


Function code String fragment order String description 

0000 0000h EBX, EDX, ECX Standard vendor-ID string. 

0000 0003h EAX, EBX, ECX, EDX Processor serial number (in upper-case hexadecimal) 
8000 0000h EBX, EDX, ECX Extended vendor-ID string. 
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Table 12: 


7.1 


7.1.1 


String Fragment Order for Strings Returned by CPUID Functions (Continued) 


Function code String fragment order String description 

8000 0002h EAX, EBX, ECX, EDX Preferred processor-name string. 
8000 0003h EAX, EBX, ECX, EDX 

8000 0004h EAX, EBX, ECX, EDX 

8086 0000h EBX, EDX, ECX Transmeta vendor-ID string. 
8086 0003h EAX, EBX, ECX, EDX Transmeta information string. 
8086 0004h EAX, EBX, ECX, EDX 

8086 0005h EAX, EBX, ECX, EDX 

8086 0006h EAX, EBX, ECX, EDX 


Processor Detection 


The CPUID instruction uses the EAX register as an input. If the upper 16 bits in EAX are clear (O000h), the 
CPUID standard function set is selected. If the upper 16 bits in EAX are set to 8000h, the extended function 
set is selected. A Transmeta-specific extended function set is also available by setting the upper 16 bits of 
EAX to 8086h. The output or return values are loaded into the EAX, EBX, ECX and EDX registers. CPUID is 
a non-privileged serializing instruction. 

The TM8000 supports the standard and extended functions listed in the following tables. All EAX input values 
other than those listed in the tables are reserved and return the value of 0000 0000h in the output registers. 
Implicitly reserved functions have zero return values in all output registers. Additionally, some of the bits listed 
are designated as “reserved” bits. Software should not rely on the value of reserved bits. 

The following functions are defined. Functions are arranged by EAX input value. 

« — Reserved Functions on page 124 

*  CPUID Standard Functions on page 125 

*  CPUID Extended Functions on page 128 


* CPUID Transmeta-Specific Functions on page 132 


Reserved Functions 


All CPUID function values other than those listed explicitly in this document are reserved for future 
extensions. Implicitly reserved functions have zero return values in all output registers. 
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7.1.2 CPUID Standard Functions 


CPUID Function 0000 0000h 


Output 
Register | Output Value | Output Definition 
EAX 0000 0001h Standard Function Maximum Level—Maximum level supported for the 
or standard function. 
0000 0003h If the processor serial number (PSN) function is disabled, the maximum level 
supported is 1. If PSN is enabled, the maximum level supported is 3. 
EBX 756E 6547h Vendor ID String—The sequence EBX-EDX-ECX forms the vendor 
ECX 3638 784Dh identification string. The value after reset is “Genuine TMx86”. This value is 
programmable using MSRs (see CPUID Vendor ID String Registers on 
EDX 5465 6E69h page 149). Also see String Representation on page 123. 
CPUID Function 0000 0001h 
Output 
Register | Output Value | Output Definition 
EAX 0000 OF 24h Processor Identification—Bits are defined as follows: 
Bits Description | Default 
31:14 Reserved -- 
13:12 CPU Type Oh 
11:8 Family Fh 
7:4 Model 2h 
3:0 Stepping 4h 
All bits are programmable using the CPUID_TFMS MSR (see CPUID Type, 
Family, Model, and Stepping Register on page 149). 
EBX 0001 1000h Processor Feature Flags—All bits not listed are reserved. A set bit (1) 
indicates the presence of a feature. 
Bits Description 
31:24 APIC physical ID, valid only if a local APIC is supported 
23:16 Virtual processor count, valid only if bit 28 in CPUID level 
0000 0001h, EDX is set 
15:8 CFLUSH line size (in QWORDS), valid only if the CFLUSH 
instruction is supported 
7:0 Brand ID, valid only if non-zero 
ECX 0000 0000h Reserved 
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CPUID Function 0000 0001h (Continued) 


Output 
Register 


Output Value 


Output Definition 


EDX see below 


Processor Feature Flags—All bits not listed are reserved. A set bit (1) 
indicates the presence of a feature. 


Bit Name Description 

29 TM Thermal monitor’ 

27 Ss Self snoop 

26 SSE2 SSE2 instructions 

25 SSE SSE instructions 

24 FXSR Fast FP Save and Restore 
23 MMX MMx instructions 

22 ACPI Thermal monitor2 

19 CLFL CLFLUSH instruction 

18 PSN Processor serial number 

17 PSE36 36-bit Page Size Extension 
16 PAT Page Attribute Table 

15 CMOV Conditional Move instructions 
14 MCA Machine Check Architecture 
13 PGE Global Paging Extension 

12 MTRR Memory Type Region Registers 
11 SEP Fast System Call Extension 
9 APIC Local APIC 

8 CxX8 CMPXCHG8B instruction 

7 MCE Machine Check Exception 

6 PAE Physical Address Extension 
5 MSR Model Specific Registers 

4 TSC Time Stamp Counter 

3 PSE Page Size Extensions 

2 DE Debug Extensions 

1 VME Virtual Mode Extensions 

0 FPU Floating-Point Unit 


All bits may be forced to 0 using the CPUID_MASK MSR (see CPUID Feature 
Flag Mask Register on page 149). 


Valid values include the following: 


PSN Local APIC 
2FCF FBFFh enabled enabled (default) 
2FCB FBFFh disabled enabled 
2FCF F9OFFh enabled disabled 
2FCB FOFFh disabled | disabled 
1. Automatic thermal control circuit 
2. Software-controlled clock facilities 
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CPUID Function 0000 0002h 


Output Definition 


Reserved 


Output 

Register | Output Value 
EAX 0000 0001h 
EBX 0000 0000h 
ECX 0000 0000h 
EDX 0000 0000h 


CPUID Function 0000 0003h 


Output Definition 


Processor Serial Number (PSN)—This function returns the processor 


serial number. If PSN is disabled, the returned register values are 


undefined. Due to technical reasons, Transmeta does not guarantee that 
the PSN is truly unique. ECX and EDX may return zero values on 


Output 

Register | Output Value 
EAX 0000 0000h 
EBX XXXX XXxXxh 
ECX XXXX XXxxh 
EDX XXXX XXXXN 


evaluation parts. OEMs may permanantly disable PSN. 
Also see String Representation on page 123. 
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7.1.3. CPUID Extended Functions 


CPUID Function 8000 0000h 


Output 
Register | Output Value | Output Definition 


EAX 8000 0008h Extended Function Maximum Level—Maximum level supported is 8. 
EBX 6E61 7254h Vendor ID String—The sequence EBX-EDX-ECX forms the vendor 
ECX 5550 4361h identification string. The value after reset is “TransmetaCPU’. This value is 


not programmable. 
EDX 7465 6D73h 


Also see String Representation on page 123. 


CPUID Function 8000 0001h 


Output 
Register | Output Value | Output Definition 
EAX 0000 OF 24h Processor Identification—Bits are defined as follows: 
Bits Description | Default 
31-14 | Reserved -- 
13-12 | CPU Type Oh 
11-8 Family Fh 
7-4 Model 2h 
3-0 Stepping 4h 
This value is not programmable. 
EBX 0000 0000h Reserved 
ECX 0000 0000h Reserved 
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CPUID Function 8000 0001h (Continued) 


Output 
Register | Output Value | Output Definition 
EDX see below Processor Feature Flags—All bits not listed are reserved. A set bit (1) 
indicates the presence of a feature. 
Bit Name Description 
24 FXSR Fast FP Save and Restore 
23 MMX MMx instructions 
22 MMX+ SSE-MMX/SSE-MEM instructions 
17 PSE36 36-bit Page Size Extension 
16 PAT Page Attribute Table 
15 CMOV Conditional Move instructions 
14 MCA Machine Check Architecture 
13 PGE Global Paging Extension 
12 MTRR Memory Type Region Registers 
9 APIC Local APIC 
8 CxX8 CMPXCHG8B instruction 
7 MCE Machine Check Architecture 
6 PAE Physical Address Extension 
5 MSR Model Specific Registers 
4 TSC Time Stamp Counter 
3 PSE Page Size Extensions 
2 DE Debug Extensions 
1 VME Virtual Mode Extensions 
0 FPU Floating-Point Unit 
This value is not programmable. 
Local APIC 
01C3 F3FFh enabled (default) 
01C3 FiFFh disabled 
CPUID Function 8000 0002-8000 0004h 
Output Register | Output Value / Output Definition 
EAX XXXX XXXxN Processor Name—The output, when consecutively stored in the order 
EBX XXXX XXXXN EAX-EBX-ECX-EDxX, forms the processor name up to 48 ASCII 
characters. Unused characters are filled with OOh. The value is: 
ECX XXXX XXXxXN 
Transmeta TM8000 Processor\00h 
EDX XXXX XXxxh : 
where xxxx stands for the model number, which can be up to 11 
characters long and is derived from the OEM configuration table. 
Transmeta highly recommends using this string whenever the 
processor name is displayed to the end user. See String 
Representation on page 123. This value is not programmable. 
CPUID Function 8000 0005h 
Output Register | Output Value / Output Definition 
EAX 0000 0000h Reserved 
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CPUID Function 8000 0005h (Continued) 


Output Register | Output Value / Output Definition 


EBX O4FF O4FFh TLB Characteristics—Bits are defined as follows: 
Bits Description Value 
31-24 Data TLB associativity 4-way 
23-16 Data TLB size 256 entries 
15-8 Code TLB associativity 4-way 
7-0 Code TLB size 256 entries 
Notes: CPUID reports 255 instead of 256 entries because the field is 
limited to 8 bits. Also note that the actual 256-entry TLB is reported 
twice, for compatibility purposes: once for the code TLB, and once for 
the data TLB. 
Also note that the TLB can handle only small pages—large pages are 
implemented by allocating multiple small pages. 
ECX 4008 0120h L1 Data Cache Characteristics—Bits are defined as follows: 
Bits Description Value 
31-24 Cache size 64 KBytes 
23-16 Cache associativity 8-way 
15-8 Cache lines/tag al 
7-0 Cache bytes/line 32 
EDX 8004 0140h L1 Code Cache Characteristics—Bits are defined as follows: 
Bits Description Value 
31-24 Cache size 128 KBytes 
23-16 Cache associativity 4-way 
15-8 Cache lines/tag 1 
7-0 Cache bytes/line 64 


CPUID Function 8000 0006h 


Output Register 


Output Value 


Output Definition 


EAX 0000 0000h Reserved 
EBX 0000 0000h Reserved 
ECX see below L2 Data Cache Characteristics—Bits are defined as follows: 
Bits Description Value 
31-24 Cache size 512, 1024, or 2048 KBytes 
23-16 Cache associativity | 4-way 
15-8 Cache lines/tag 1 
7-0 Cache bytes/line 128 
0200 4180h TM8000 512K 
0400 4180h TM8000 1MB 
0800 4180h TM8000 2MB 
EDX 0000 0000h Reserved 


Transmeta Proprietary Information Provided Under Nondisclosure Agreement 


TRANSMETA 


TM8000 Programming and Configuration Guide 


August 19, 2003 


PRELIMINARY INFORMATION Part 2: BIOS Programming 
SUBJECT TO CHANGE Processor and Frequency Detection 


CPUID Function 8000 0007h 


Output Output 
Register | Value Output Definition 
EAX 0000 0000h Reserved—lIncluded for compatibility purposes. 
EBX 0000 0000h 
ECX 0000 0000h 
EDX 0000 0000h 
CPUID Function 8000 0008h 
Output Output 
Register | Value Output Definition 
EAX 0000 2020h_ | Address Size—Virtual and physical address size 
Bits Definition 
15:8 Virtual address size 
7:0 Physical address size 
Note that the physical address size is 32 bits rather than 36 bits, even though 
the TM8000 supports PAE and PSE36. 
EBX 0000 0000h Reserved 
ECX 0000 0000h 
EDX 0000 0000h 
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7.1.4 CPUID Transmeta-Specific Functions 


CPUID Function 8086 0000h 


EAX Input Output Output 
Value Register | Value Output Definition 
8086 0000h EAX 8086 0007h Transmeta-Specific Extended Function Maximum Level 
Maximum level supported for the extended function is 7. 
EBX 6E61 7254h | Vendor ID String The sequence EBX-EDX-ECX forms the 
ECX 5550 4361h vendor identification string. The value after reset is 
“TransmetaCPU”. This value is not programmable. 
EDX 7465 6D73h ; ; 
Also see String Representation on page 123. 
CPUID Function 8086 0001h 
Output 
Register | Output Value | Output Definition 
EAX 0000 OF 24h Processor Identification—Bits are defined as follows: 
Bits Description | Default 
31-14 | Reserved -- 
13-12 | CPU Type Oh 
11-8 Family Fh 
7-4 Model 2h 
3-0 Stepping 4h 
This value is not programmable. 
EBX aabb ccddh Processor Revision ID The processor version and processor-mask 
(see below, revision. Bits are defined as follows: 
description) 31-24: Major processor version 
23-16: Minor processor version 
15-8: Major processor-mask revision 
7-0: Minor processor-mask revision 
Bits Description 
31-24 | Major processor version 
23-16 | Minor processor version 
15-8 Major processor-mask revision 
7-0 Minor processor-mask revision 
Display the processor revision ID and frequency as follows: 
a.b-c.d-x 
a, b, c, and d are the unsigned decimal representations of the numbers aah, 
bbh, cch, and ddh (respectively) from EBX. x is the frequency from ECX, also 
an unsigned decimal. For example, if EBX is O70B_1311h (7, 11, 19, 17 
decimal) and ECX is 1E61h (7777 decimal), display the revision ID as follows: 
7.11-19.17-7777 
0200 0000h See CPUID function CPUID Function 8086 0002h, register EAX 
ECX XXXX XXXxxh Nominal Processor Core Frequency—This value represents the nominal 
processor core clock frequency in MHz. Fractional frequencies may be 
rounded up or down. See the description for EBX above for printing 
specifications. 
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CPUID Function 8086 0001h (Continued) 


Output 
Register | Output Value | Output Definition 
EDX TBD Transmeta-Specific Processor Feature Flags—A set bit represents the 


presence of a feature, while a cleared bit indicates either the absence of a 
feature or a reserved flag. 


Bit Name 

12 TPBE 

3 LRTI 

1 LongRun™ 


Feature Description 


Transmeta Processor Break Events 


LongRun Table Interface 


LongRun support—note that this feature flag 
remains set even when LongRun has been 
effectively disabled by both minimum and 
maximum percentage to 100%:100% (see 
LongRun™ Control and Status Register on 
page 150 as well as Chapter 5, Power 
Management on page 41). 


0 Recovery Recovery Code Morphing software is active 
(e.g. after a bad flash). If this bit is set, the 
processor is running in a failure recovery mode. 
This is an indication that the primary version of 
the Code Morphing software in the ROM is 


damaged and should be replaced. 


CPUID Function 8086 0002h 


Output 
Register | Output Value | Output Definition 
EAX XXXX XXxxh Transmeta Processor Revision ID—If CPUID Function 8086 0002h, 
register EBX reports 0200 0000h, then this register reports the Transmeta 
processor revision ID in hexadecimal, upper-case as follows: 
Bits Description 
31:29 | Major revision 
28:25 | Minor revision 
24:0 Reserved. 
EBX aabb ccddh Code Morphing Software Revision—The first part (the EBX register) 
ECX eh consists of four 8-bit-wide numbers: for example, 0102 0304h represents the 
numbers 1, 2, 3, and 4. The second part (the ECX register) consists of one 
32-bit-wide number. 
Display the Code Morphing Software revision ID as follows: 
a.b.c-d-x... 
a, b, c, d, and x are the unsigned decimal representations of the numbers 
aah, bbh, cch, ddh, and xxxx xxxxh from registers EBX and ECX, 
respectively. For example, if EBX is 0509 011Fh (5, 9, 1, 31 decimal) and 
ECX is 0041 A028h (4300840 decimal), display the revision ID as follows: 
5.9.1-31-4300840 
EDX 0000 0000h Reserved 
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CPUID Function 8086 0003-8086 0006h 
Output Output 


Register | Value Output Definition 

EAX XXXX XxXxXxh Transmeta-Specific Information String—The output of the codes for 

EBX OOOL 36068 functions 8086 0003-8086 0006h, when consecutively stored into memory in 
the order EAX-EBX-ECX-EDX, forms a Transmeta-specific information string 

ECX 200K 00XXN which may consist of up to 64 ASCII characters. Unused characters are filled 

EDX XXXX Xxxxh with a value of OOh. Also see String Representation on page 123. 


CPUID Function 8086 0007h 
Output | Output 
Register | Value Output Definition 


EAX Xxxx xxxxh_ | Current Processor Core Frequency—Current processor core clock frequency 
in MHz. Fractional frequencies may be rounded up or down. 


This value is 0000 0000h if LongRun is not supported. 


EBX Xxxx xxxxh_ | Current Processor Core Voltage—Current processor core voltage, in millivolts. 
This value is 0000 0000h if LongRun is not supported. 

ECX Xxxx xxxxh_ | Current Performance Percentage—Current performance percentage (0-100d). 
This value is 0000 0000h if LongRun is not supported. 

EDX 0000 0000h | Current Gate Delay—cCurrent gate delay in femtoseconds. If a gate delay is not 


applicable (as in the TM8000), then a value of zero is reported. 


NOTE for these registers: Although no execution progress is made during a LongRun transition, x86 
execution does continue while voltage is being adjusted. Thus, it is possible that this CPUID function is 
queried during a LongRun transition. In this case, returned values may be ambiguous in that they could 
represent either the old or the new state. 

By the same token, waiting for a new state to be reported in this function does not guarantee that the 
LongRun transition has finished. Note also that LongRun Advanced Thermal Management™ takes priority 
over LongRun voltage and frequency adjustments. 


7.2 Frequency Detection 


The recommended method for determining the frequency of the TM8000 is to use the Transmeta-specific 
extended functions of the CPUID instruction, as follows: 


* Executing CPUID with an input value of 8086 0001h always returns the nominal (i.e. maximum) CPU 
core frequency in the ECX register. 


* — If LongRun is enabled, the actual CPU frequency can be determined from CPUID Function 8086 0007h, 
EAX register—see Current Processor Core Frequency on page 134. Determine whether LongRun is 
enabled with CPUID Function 8086 0001, EDX register, bit 1 (see Transmeta-Specific Processor Feature 
Flags on page 132). 
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8.1 


Chapter 8 


Model-Specific 
Registers 


This chapter describes the Model-Specific Registers (MSRs) that are supported by Transmeta processors, as 
well as the instructions that can be used to access those MSRs. 


Introduction 


The Model-Specific Registers allow you to observe and control the behavior of processor-specific details. 
Three instructions can access the MSRs, and the CPUID instruction can be used to determine whether MSRs 
are supported or not. Transmeta processors support MSRs, including the timestamp counter (TSC). 


In general, MSRs are 64 bits wide, though not every MSR implements all 64 bits. Reserved bits read as 0, 
while writing a 1 into a reserved bit generates a GP(0) exception. The RDMSR and WRMSR instructions read 
and write MSR values, while the RDTSC instruction reads the TSC value. Trying to read from or write to a 
reserved MSR generates a GP(0) exception. 


The RDMSR and WRMSR instructions are privileged, and WRMSR is serializing. Both of these instructions 
require the MSR index as an input value, in register ECX. The RDMSR instruction returns the current MSR 
value in EDX (high-order 32 bits) and EAX (low-order 32 bits). WRMSR requires the desired MSR value as an 
input, also in EDX and EAX as described. 


Because the MSRs differ from processor to processor, your programs should use them with caution. 
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8.2 Intel-Compatible MSRs 


The following Intel-compatible standard MSRs are provided. All are 64 bits wide. 


Table 13: Intel-Compatible MSR Summary 

Description Register Name Index Access | Pg 
Timestamp Counter Register TSC 0000 0010h RW 137 
Local APIC Status and Location Register APIC_BASE 0000 001Bh RW 138 
Processor Hard Power-On Register EBC_HARD_POWERON 0000 002Ah RO 138 
MTRR Capabilities Register MTRR_CAP 0000 OOFEh RO 138 
Processor Serial Number Disable Register PSN_DISABLE 0000 0119h RWO 139 
SYSENTER/SYSEXIT Base Selector Register SEP_SEL 0000 0174h RO 139 
SYSENTER ESP Register SEP_ESP 0000 0175h RO 139 
SYSENTER EIP Register SYSENTER_EIP 0000 0176h RO 140 
Machine Check Global Capabilities Register MCG_CAP 0000 0179h RO 140 
Machine Check Global Status Register MCG_STATUS 0000 017Ah RO 140 
Machine Check Global Control Register MCG_CTL 0000 017Bh RW 141 
Thermal Control Register THERM_CONTROL 0000 019Ah RW 141 
Thermal Interrupt Register THERM_INTERRUPT 0000 019Bh RW 141 
Thermal Status Register THERM_STATUS 0000 019Ch RO 141 
Miscellaneous Enable Register MISC_ENABLE 0000 01A0h RO 142 
Variable Range MTRR Registers MTRR_PHYSBASEO 0000 0200h RW 143 

MTRR_PHYSMASKO 0000 0201h 

MTRR_PHYSBASE1 0000 0202h 

MTRR_PHYSMASK‘1 0000 0203h 

MTRR_PHYSBASE2 0000 0204h 

MTRR_PHYSMASK2 0000 0205h 

MTRR_PHYSBASE3 0000 0206h 

MTRR_PHYSMASK3 0000 0207h 

MTRR_PHYSBASE4 0000 0208h 

MTRR_PHYSMASK4 0000 0209h 

MTRR_PHYSBASE5 0000 020Ah 

MTRR_PHYSMASK5 0000 020Bh 

MTRR_PHYSBASE6 0000 020Ch 

MTRR_PHYSMASK6 0000 020Dh 

MTRR_PHYSBASE7 0000 020Eh 

MTRR_PHYSMASK7 0000 020Fh 
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Table 13: Intel-Compatible MSR Summary (Continued) 

Description Register Name Index Access | Pg 
Fixed Range MTRR Registers MTRR_FIX64K_00000 0000 0250h RW 144 

MTRR_FIX16K_80000 0000 0258h 

MTRR_FIX16K_A0000 0000 0259h 

MTRR_FIX4K_C0000 0000 0268h 

MTRR_FIX4K_C8000 0000 0269h 

MTRR_FIX4K_D0000 0000 026Ah 

MTRR_FIX4K_D8000 0000 026Bh 

MTRR_FIX4K_E0000 0000 026Ch 

MTRR_FIX4K_E8000 0000 026Dh 

MTRR_FIX4K_F0000 0000 026Eh 

MTRR_FIX4K_F8000 0000 026Fh 
PAT Control Register CR_PAT 0000 0277h RW 144 
MTRR Type Definition Register MTRR_DEF_TYPE 0000 02FFh RW 145 
Machine Check Bank 0 Control Register MCO_CTL 0000 0400h RW 145 
Machine Check Bank 0 Status Register MCO_STATUS 0000 0401h RW 146 
Machine Check Bank 0 Address Register MCO_ADDR 0000 0402h RO 147 
Machine Check Bank 0 Miscellaneous Register MCO_MISC 0000 0403h RO 148 
Machine Check Bank 1 Control Register MC1_CTL 0000 0404h RW 145 
Machine Check Bank 1 Status Register MC1_STATUS 0000 0405h RW 146 
Machine Check Bank 1 Address Register MC1_ADDR 0000 0406h RO 147 
Machine Check Bank 1 Miscellaneous Register MC1_MISC 0000 0407h RO 148 
Machine Check Bank 2 Control Register MC2_CTL 0000 0408h RW 145 
Machine Check Bank 2 Status Register MC2_STATUS 0000 0409h RW 146 
Machine Check Bank 2 Address Register MC2_ADDR 0000 040Ah RO 147 
Machine Check Bank 2 Miscellaneous Register MC2_MISC 0000 040Bh RO 148 
Machine Check Bank 3 Control Register MC3_CTL 0000 040Ch RW 145 
Machine Check Bank 3 Status Register MC3_STATUS 0000 040Dh RW 146 
Machine Check Bank 3 Address Register MC3_ADDR 0000 040Eh RO 147 
Machine Check Bank 3 Miscellaneous Register MC3_MISC 0000 040Fh RO 148 


tsc Timestamp Counter Register 


0000 0010h 


This 64-bit register increments once for every nominal processor core clock cycle. Thus, if the processor core 
clock frequency changes, the increment rate of the TSC remains constant. Support for this MSR is indicated 
by a standard feature flag (TSC) returned by the CPUID instruction. See CPU/D Function 0000 0007h on 


page 125, register EDX. 


Index Register Name 


Access 


0000 0010h TSC 


RW 
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Bit(s) Description 
63:32 TSC (high)—Bits 63:32 are zero-extended on writes. 
31:0 TSC (low)—Only bits 31:0 can be written. 


The RDTSC instruction is only privileged if CR4.TSD is set to 1. It expects no input values, and returns the 
current TSC value in EDX and EAX. Do not use RDMSR to read the TSC, as the actual MSR that holds the 
TSC might be implemented at a different index in the future. Moreover, if you use the TSC for instruction 
timing, you must keep the non-deterministic instruction timing of Transmeta processors in mind. 


apic_BAsE Local APIC Status and Location Register 


0000 001Bh 
This 64-bit register reports the status and location of the local APIC. It is only supported if the local APIC is 


supported. 
Index Register Name Access 
0000 001Bh APIC_BASE RW 


Bit(s) Description 
63:36 Reserved 
35:32 Scratch—Hold their value, but are ignored. 


31:12 Local APIC Base Address—The BASE field specifies the physical base address of the local 
APIC registers. This 20-bit address is zero-extended at the low end to form a 32-bit address, 
which is automatically aligned to a 4KB boundary. 


11 Local APIC Enable—This bit determines whether the local APIC hardware is disabled (0) or 
enabled (1). The state of this bit is not permanent until the next RESET. 

10:9 Reserved 

8 Boot Strap Processor—This bit indicates whether the processor is the Boot Strap Processor 


(BSP) or not. Hardwired to 1, as Transmeta processors do not support Multi-Processing. 


7:0 Reserved 


eec_varo_poweron Processor Hard Power-On Register 
0000 002Ah 


This MSR is provided for compatibility purposes only. RDMSR always returns 0 for this MSR. . 


Index Register Name Access 
0000 002Ah EBC_HARD_POWERON RW 


mTRR_cAP MIRR Capabilities Register 


0000 OOFEh 
This MSR returns information about the MTRRs supported on this processor. . 
Index Register Name Access 
0000 OOFEh MTRR_CAP RO 
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63:11 Reserved 
10 WC—Write-combining memory type supported when set. 
9 Reserved 
8 FIX—Fixed-range registers supported when set. 
7:0 VCNT—Number of variable-range registers. 


PSN_DISABLE 
0000 0119h 


SEP_SEL 
0000 0174h 


SEP_ESP 
0000 0175h 


Processor Serial Number Disable Register 


Use this register to disable the processor serial number. 


Index Register Name Access 


0000 0119h PSN_DISABLE RWO 


Bit(s) Description 


63:22 Reserved 


21 PSN Disable—This bit disables the processor serial number (PSN) when set. The bit cannot be 
cleared once it is set to 1, except by processor RESET. 


The value of bit 21 after RESET is determined by the configuration variable psn_disable. For 
more information, see the Code Morphing™ Software Guide. 


20:0 Reserved 


SYSENTER/SYSEXIT Base Selector Register 


This is the 16-bit selector that is used by the SYSENTER and SYSEXIT instructions. The upper 32 bits are 
ignored during WRMSR, and always read as zero. Note that bits 31:16 are scratch bits—they hold their value 
but have no function. Support for this MSR is indicated by a standard feature flag (SEP) returned by the 
CPUID instruction. See CPUID Function 0000 0007h on page 125, register EDX. 


Index Register Name Access 
0000 0174h SEP_SEL RO 


Bit(s) Description 

63:32 Ignored 

31:16 Scratch—Hold their value, but are ignored. 
15:0 SYSENTER/SYSEXIT Base Selector 


SYSENTER ESP Register 


This is the 32-bit ESP value that is used by the SYSENTER instruction. The upper 32 bits are ignored during 
WRMSR, and always read as zero. Support for this MSR is indicated by a standard feature flag (SEP) 
returned by the CPUID instruction. See CPU/D Function 0000 0001h on page 125, register EDX 


Index Register Name Access 
0000 0175h SEP_ESP RO 


Tea NSME TA ‘o Transmeta Proprietary Information Provided Under Nondisclosure Agreement 139 


Part 2: BIOS Programming PRELIMINARY INFORMATION TM8000 Programming and Configuration Guide 
Model-Specific Registers SUBJECT TO CHANGE August 19, 2003 


Bit(s) Description 
63:32 Ignored—Read as 0. 
31:0 SYSENTER ESP 


sysenTeR IP SY SENTER EIP Register 


0000 0176h 
This is the 32-bit EIP value that is used by the SYSENTER instruction. The upper 32 bits are ignored during 
WRMSR, and always read as zero. Support for this MSR is indicated by a standard feature flag (SEP) 
returned by the CPUID instruction. See CPU/D Function 0000 0007h on page 125, register EDX 


Index Register Name Access 
0000 0176h SYSENTER_EIP RO 
Bit(s) Description 

63:32 Reserved (read as zero) 

31:0 SYSENTER EIP 


mcc_caP Machine Check Global Capabilities Register 
0000 0179h 


This MSR is a read-only register that provides information about the machine-check architecture 
implementation. For more information, see Machine Check Registers on page 29. 


Index Register Name Access 

0000 0179h MCG_CAP RO 

Bit(s) Description 

63:9 Reserved 

8 MCG Control Register Present (MCG_CTL_P) Flag—lIndicates that the processor implements 
the MCG_CTL MSR when set; these registers are absent when clear. This bit is always 0. 

7:0 Count—Indicates the number of hardware unit error-reporting banks available in a particular 


processor implementation. For Astro processors, this field always indicates 4 banks. 


mcc_status Machine Check Global Status Register 
0000 017Ah 


This MSR is a read-only register that provides information about the machine-check architecture 
implementation. For more information, see Machine Check Registers on page 29. 


Index Register Name Access 

0000 017Ah MCG_STATUS RO 

Bit(s) Description 

63:3 Reserved 

2 Machine Check in Progress (MCIP) Flag—lIndicates (when set) that a machine-check 


exception was generated. Software can set or clear this flag. The occurrence of a second 
Machine-Check Event while MCIP is set will cause the processor to enter a shutdown state. 
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MCG_CTL 
0000 017Bh 


THERM_CONTROL 
0000 019Ah 


THERM_INTERRUPT 
0000 019Bh 


THERM_STATUS 
0000 019Ch 


Bit(s) Description 
1 Error IP Valid Flag (EIPV)—Indicates (when set) that the instruction pointed to by the 
instruction pointer pushed onto the stack when the machine-check exception is generated is 


directly associated with the error. When this flag is cleared, the instruction pointed to may not be 
associ-ated with the error. 


0 Restart IP Valid Flag (RIPV)—Indicates (when set) that program execution can be restarted 
reliably at the instruction pointed to by the instruction pointer pushed on the stack when the 
machine-check exception is generated. When clear, the program cannot be reliably restarted at 
the pushed instruction pointer.. 


Machine Check Global Control Register 


This MSR is a read-write register that exists for the sake of compatibility only. On Astro processors, all 
available error reporting sources are available continuously. Writes to this MSR have no effect. For more 
information, see Machine Check Registers on page 29. 


Index Register Name Access 
0000 017Bh MCG_CTL RW 


Thermal Control Register 


The TM8000 supports this register for compatibility, but does not support the functionality. See Chapter 6, 
Thermal Management for more information about thermal management on the TM8000. Support for this MSR 
is indicated by a standard feature flag (ACPI) returned by the CPUID instruction; see CPUI/D Function 

0000 0001h on page 125, register EDX 


Index Register Name Access 


0000 019Ah THERM_CONTROL RW 


Thermal Interrupt Register 


The TM8000 supports this register for compatibility, but does not support the functionality. See Chapter 6, 
Thermal Management for more information about thermal management on the TM8000. Support for this MSR 
is indicated by a standard feature flag (TM) returned by the CPUID instruction; see CPUID Function 

0000 0001h on page 125, register EDX 


Index Register Name Access 


0000 019Bh THERM_INTERRUPT RW 


Thermal Status Register 


The TM8000 supports this register for compatibility, but does not support the functionality. See Chapter 6, 
Thermal Management for more information about thermal management on the TM8000. Support for this MSR 
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is indicated by a standard feature flag (TM) returned by the CPUID instruction; see CPUID Function 
0000 0007h on page 125, register EDX 


Index Register Name Access 
0000 019Ch THERM_STATUS RO 


Misc_ENABLE Miscellaneous Enable Register 
0000 01A0h 


Miscellaneous feature enable. Support for this MSR is not indicated by a feature flag returned by the CPUID 
instruction (CPUID Function 0000 0007h on page 125, register EDX). 


Index Register Name Access 
0000 01A0h MISC_ENABLE RO 
Bit(s) Description 

63:13 Ignored During WRMSR—Always read as 0. 

12 PEBS—Hardwired to 1. The TM8000 does not support this feature. 
11 BTS—Hardwired to 1. The TM8000 does not support this feature. 
10:8 Ignored During WRMSR—Always read as 0. 

7 PeMo—Hardwired to 0. The TM8000 does not support this feature. 
6:3 Scratch—Hold their value, but are ignored. 

2 FP Opcode Compatibility Mode—Hardwired to 1. Always enabled on the TM8000. 
1:0 Scratch—Hold their value, but are ignored. 
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MTRR_PHYSBASEn 
MTRR_PHYSMASKn 


0000 0200h 
through 
0000 020Fh 


Variable Range MTRR Registers 


The following MSRs define the variable MTRR support for Astro. Each variable memory range has an 
associated base register (MTRR_PHYSBASEn) and (MTRR_PHYSMASKn). For more information, see 
Memory-Type Range Registers on page 33. 


Index Register Name Access _| Description 
0000 0200h_ | MTRR_PHYSBASEO RW Each variable range is made up of two registers: 
0000 0201h | MTRR_PHYSMASKO RW The first in each pair, MTRR_PHYSBASEn, defines 
0000 0202h_ | MTRR_PHYSBASE1 RW the base address and memory type for the range. 
0000 0203h MTRR PHYSMASK1 RW The second in each pair, MTRR_PHYSMASKn, 
= contains a mask used to determine the address 
0000 0204h =| MTRR_PHYSBASE2 RW range, as shown in the bitfield descriptions below. 
0000 0205h_ =| MTRR_PHYSMASK2 RW 
0000 0206h_ | MTRR_PHYSBASE3 RW 
0000 0207h_ =| MTRR_PHYSMASK3 RW 
0000 0208h_ | MTRR_PHYSBASE4 RW 
0000 0209h_ | MTRR_PHYSMASK4 RW 
0000 020Ah_ | MTRR_PHYSBASES5 RW 
0000 020Bh_ | MTRR_PHYSMASK5 RW 
0000 020Ch_ | MTRR_PHYSBASE6 RW 
0000 020Dh_ | MTRR_PHYSMASK6 RW 
0000 020Eh_ | MTRR_PHYSBASE7 RW 
0000 020Fh_ | MTRR_PHYSMASK7 RW 
MTRR_PHYSBASEn Bit Description 
Bit(s) Description 
63:36 Reserved 
35:12 PhysBase—Specifies the base address of the address range. This 24-bit value is extended by 
12 bits at the low end to form the base address, which automatically aligns the address on a 4- 
KByte boundary. 
11:8 Reserved 
7:0 TYPE—Memory type for this region. Valid entries include any of the memory type encodings 


shown in the TYPE field (bits 0:7) of the MTRR Type Definition Register on page 145 


MTRR_PHYSMASkKn Bit Description 


Bit(s) Description 

63:36 Reserved 

35:12 PhysMask—Specifies a 24-bit mask that determines the range of the region being mapped, 
according to the following relationship: 
Address_Within Range AND PhysMask = PhysBase AND PhysMask 
This 24-bit value is extended by 12 bits at the low end to form the mask value. 

11 Valid—Enables the register pair when set 

10:0 Reserved 

Tea NSME TA ‘o Transmeta Proprietary Information Provided Under Nondisclosure Agreement 143 


Part 2: BIOS Programming 
Model-Specific Registers 


PRELIMINARY INFORMATION TM8000 Programming and Configuration Guide 
SUBJECT TO CHANGE August 19, 2003 


MTRR_FIxx Fixed Range MTRR Registers 


0000 0250h 
through 
0000 026Fh 


cr_pat PAT Control Register 


0000 0277h 


The following MSRs define the fixed MTRR support for Astro. Each of these registers is divided into 8-bit 
fields that are used to specify the memory type for each of the sub-ranges the register controls, as described 
in the following table. For more information, see Memory-Type Range Registers on page 33. 


Index Register Name Access _| Description 
0000 0250h MTRR_FIX64K_00000 | RW Maps the 512-KByte address range from OH to 
7FFFFH. This range is divided into eight 64-KByte 
sub-ranges. 
0000 0258h MTRR_FIX16K_80000 | RW Maps the two 128-KByte address ranges from 
0000 0259h MTRR FIX16K AQO000 RW 80000H to BFFFFH. This range Is divided into ; 
= = sixteen 16-KByte sub-ranges, 8 ranges per register. 
0000 0268h_ =| MTRR_FIX4K_CO000 RW Maps eight 32-KByte address ranges from COOQ00H 
0000 0269h MTRR FIX4K C8000 RW to FFFFFH. This range is divided into sixty-four 4- 
= = KByte sub-ranges, 8 ranges per register. 
0000 026Ah_ | MTRR_FIX4K_D0000 RW 
0000 026Bh_ | MTRR_FIX4K_D8000 RW 
0000 026Ch_ | MTRR_FIX4K_E0000 RW 
0000 026Dh | MTRR_FIX4K_E8000 RW 
0000 026Eh_ | MTRR_FIX4K_F0000 RW 
0000 026Fh_ =| MTRR_FIX4K_F8000 RW 


This MSR controls PAT support. For more information, see Memory-Type Range Registers on page 33. 


This MSR contains eight page attribute fields: PAO through PA7. The three low-order bits of each field are 
used to specify a memory type. The five high-order bits of each field are reserved, and must be set to all Os. 
Each of the eight page attribute fields can contain any of the memory type encodings shown in the TYPE field 
(bits 0:7) of the MTRR Type Definition Register on page 145. 


Index Register Name Access 
0000 0277h CR_PAT RW 
Bit(s) Description Bit(s) Description 
63:59 Reserved 31:27 Reserved 
58:56 PA7 26:24 PA3 

55:51 Reserved 23:19 Reserved 
50:48 PA6 18:16 PA2 

47:43 Reserved 15:11 Reserved 
42:40 PA5 10:8 PA1 

39:35 Reserved 7:3 Reserved 
34:32 PA4 2:0 PAO 
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MTRR_DEF_TYPE MIRR Type Definition Register 


0000 O2FFh 


This MSR sets default properties of the regions of physical memory not encompassed by MTRRs. 


Index Register Name Access 
0000 02FFh MTRR_DEF_TYPE RW 


Bit(s) Description 

63:12 Reserved 

11 E—Enable MTRRs. MTRRs are enabled when set. When set, the type specified in the TYPE 
bitfield (see below) is used for areas not mapped by MTRRs. When clear, the UC (uncacheable) 
memory type is applied to the entire range of physical memory. 

10 FE—Fixed-range MTRRs enabled when set. Fixed-range MTRRs take precedence over 


variable-range MTRRs when range overlaps occur. If fixed-range MTRRs are disabled, 
variable-range MTRRs can be used, and can map the range normally covered by fixed-range 


MTRRs. 
9:8 Reserved 
7:0 TYPE—Default memory type for addresses that do not have a memory type specified by an 
MTRR. Valid types are as follows: 
00h UC (uncacheable) 
01h WC (write-combining) 
04h WT (write-through). NOTE: this type is not supported by the Astro 
processor. It is instead mapped to WB (write-back). 
05h WP (write-protected). NOTE: this type is not supported by the Astro 
processor. It is instead mapped to WB (write-back). 
06h WB (write-back) 


All other values are reserved, and generate a general protection exception (GP#) if used. 


mcr_ct. Machine Check Bank n Control Register 


0000 0400h 
0000 0404h__ This MSR is a read-write register that exists for the sake of compatibility only. On Astro processors, all 
0000 0408h available error reporting sources are available continuously. Writes to this MSR have no effect. 


0000 040Ch For more information, see Machine Check Registers on page 29. 
Index Register Name Access 
0000 0400h MCO_CTL RW 
0000 0404h MC1_CTL RW 
0000 0408h MC2_CTL RW 
0000 040Ch MC3_CTL RW 

MCn_STATUS 
0000 0401h 
oe Machine Check Bank n Status Register 


0000 040Dh Each error-reporting register bank includes a machine-check status register (MCn_STATUS) that the 
processor uses to report machine-check error information. The machine-check mechanism writes the status- 
register bits when an error is detected, and sets the valid bit in the register (bit 63) to 1, indicating that the 


TeA NSME TA ‘o Transmeta Proprietary Information Provided Under Nondisclosure Agreement 145 


Part 2: BIOS Programming PRELIMINARY INFORMATION TM8000 Programming and Configuration Guide 
Model-Specific Registers SUBJECT TO CHANGE August 19, 2003 


status information is valid. Software is responsible for clearing the status register after the exception has been 
handled. 


NOTE: Although these registers are R/W, applications are allowed to clear a given bit only. Attempting to 
write a value other than 0 to an MCn_STATUS register raises a general protection (#GP) exception. 


For more information, see Machine Check Registers on page 29. 


Index Register Name Access 

0000 0401h MCO_STATUS RW 

0000 0405h MC1_STATUS RW 

0000 0409h MC2_STATUS RW 

0000 040Dh MC3_STATUS RW 

Bit(s) Name Description 

63 VAL Valid—This bit is set to 1 by the processor if the contents of MCn_STATUS are 


valid. Software should clear the VAL bit after reading the MCn_STATUS register, 
otherwise a subsequent machine-check error sets the OVER bit as described below. 


62 OVER Status Register Overflow—This bit is set to 1 by the processor if the VAL bit is 
already set to 1 as the processor attempts to load error information into 
MCn_STATUS. This indicates that the results of a previous machine-check error are 
still in the MCn_STATUS register. 


61 UC Uncorrected Error—Astro always set this bit to 1 when machine check happens, 
which indicates that the processor did not correct the error condition. 


60 EN Error Condition Enabled—Astro always set this bit to 1 when machine check 
happens, which indicates that the error condition is enabled in the corresponding 
error-reporting control register (MCn_CTL). 


59 MISCV Miscellaneous-Error Register Valid—When set to 1, this bit indicates that 
additional information about the machine-check error is saved in the corresponding 
error-reporting miscellaneous register (MCn_MISC). Astro always sets this bit to 1. 


58 ADDRV | Error-Address Register Valid—Astro sets this bit to 1 to indicate that the address 
saved in the corresponding error-reporting address register (MCn_ADDR) is valid, 
and contains the address where the error was detected. If there is no address 
associated with the error, Astro sets the bit to 0. 


57 PCC Processor-Context Corrupt—Astro always set this bit to 1 when machine check 
happens, which indicates that the processor state is likely to be corrupt due to the 
machine check error. In this case, it is possible software cannot restart the processor 


reliably. 

56:32 Other Information—Always 0. 

31:16 Model-Specific Error Code—Contains a unique code describing the error; see 
below for a list of valid error codes for the Astro processor. 

15:0 MCA Error Code— 
0: no error 


1: error detected that has not been classified in MCA error class. 


MCn_STATUS Model-Specific Error Codes 


Error Code Error Code 

CMS_MCA_DC_DC_MHIT 0x0101 CMS_MCA_HT_RD_OVFLW 0x0508 
CMS_MCA_DC_NS 0x0102 CMS_MCA_HT_CTL_TRANS 0x0509 
CMS_MCA_DC_WBS 0x0103 CMS_MCA_HT_CTL_DEASSERT 0x050a 
CMS_MCA_DC_TLB_MHIT 0x0104 CMS_MCA_HT_CMD_IN_DATA 0x050b 
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MCn_STATUS Model-Specific Error Codes (Continued) 


Error Code Error Code 

CMS_MCA_DC_PCACHE_MHIT 0x0105 CMS_MCA_HT_BAD_CMD 0x050c 
CMS_MCA_DC_NCSB_DROP 0x0106 CMS_MCA_HT_HT_INVLD_PG 0x050d 
CMS_MCA_SC_UE_CLEAN 0x0201 CMS_MCA_MI_UNC_ECC 0x0701 
CMS_MCA_SC_UE_DIRTY 0x0202 CMS_MCA_AP_RQ_OVERRUN 0x0801 
CMS_MCA_SC_MULTIHIT 0x0203 CMS_MCA_AP_INVLD_CMD 0x0802 
CMS_MCA_PC_ILLEGAL_INSN 0x0301 CMS_MCA_AP_RETRY_TIMEOUT 0x0803 
CMS_MCA_PC_MULTIHIT 0x0302 CMS_MCA_AP_TRDY_TIMEOUT 0x0804 
CMS_MCA_PC_INTRLCK_ERR 0x0303 CMS_MCA_AP_DATA_PERR 0x0805 
CMS_MCA_BB_RC_INT 0x0401 CMS_MCA_AP_ADDR_PERR 0x0806 
CMS_MCA_HT_LINK_FAIL_STAT 0x0501 CMS _MCA_AP_A_INV_AD_POSTG | 0x0807 

T 

CMS_MCA_HT_CRC_ERR_STAT 0x0502 CMS_MCA_AP_A_INV_AD_PREGT | 0x0808 
CMS_MCA_HT_PD_OVFLW 0x0503 CMS_MCA_AP_AGP_INVLD_PG 0x0809 
CMS_MCA_HT_PC_OVFLW 0x0504 CMS_MCA_AP_PCI_INVLD_PG 0x080a 
CMS_MCA_HT_NC_OVFLW 0x0505 CMS_MCA_AP_PCI_INVLD_AD 0x080b 
CMS_MCA_HT_ND_OVFLW 0x0506 CMS_MCA_BI_LRERROR 0x0901 
CMS_MCA_HT_RC_OVFLW 0x0507 CMS_MCA_BI_CERROR 0x0902 


mcr_AppbR Machine Check Bank n Address Register 


0000 0402h 

0000 0406h_ Each error-reporting register bank includes a machine-check address register (MCn_ADDR) that the 
0000 040Ah__ Processor uses to report the address associated with the machine-check error. The address field can hold 
0000 040Eh either a virtual (linear) or physical address, depending on the type of error. 


Attempting to write to MCn_ADDR will raise a general protection (#GP) exception.Attempting to write a value 
other than 0 to an MCn_STATUS register will raise a general protection (#GP) exception. 


For more information, see Machine Check Registers on page 29. 


Index Register Name Access 
0000 0402h MCO_ADDR RO 
0000 0406h MC1_ADDR RO 
0000 040Ah MC2_ADDR RO 
0000 040Eh MC3_ADDR RO 


mcr_misc Machine Check Bank n Miscellanous Register 
0000 0403h 


0000 0407h_ = Each error reporting register bank can include a machine-check miscellaneous error-information register 

0000 040Bh (MCn_MISC) that the processor uses to report additional information concerning the machine-check error. 

0000 040Fh The contents of this register are valid only if the MISCV bit in the corresponding MCn_STATUS register is set 
to 1. 


Astro saves internal error information into MCn_MISC. 
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Attempting to write to MCn_MISC will raise a general protection (#GP) exception. 


For more information, see Machine Check Registers on page 29. 


Index Register Name Access 
0000 0403h MCO_MISC RO 
0000 0407h MC1_MISC RO 
0000 040Bh MC2_MISC RO 
0000 040Fh MC3_MISC RO 


8.3 


The following Transmeta-specific MSRs are provided. 


Transmeta-Specific MSRs 


Table 14: Transmeta-Specific MSR Summary 

Description Register Name Index Access | Pg 
CPUID Type, Family, Model, and Stepping Register CPUID_TFMS 8086 0000h RW 149 
CPUID Vendor ID String Registers CPUID_VND1 8086 0001h | RW 149 

CPUID_VND2 8086 0002h 

CPUID_VND3 8086 0003h 
CPUID Feature Flag Mask Register CPUID_MASK 8086 0004h_ | RW 149 
LongRun™ Control and Status Register LONGRUN 8086 8010h_ | RW 150 
LongRun Flags Register LONGRUN_FLAGS 8086 8011h RW 150 
LongRun Table Interface Readout Register LRTI_READOUT 8086 8018h | RW 151 
LongRun Table Interface Performance Index Register LRTI_PERF 8086 8019h | RO 151 
LongRun Table Interface Voltage/Frequency Register LRTI_VOLT_MHZ 8086 801Ah | RO 151 
LongRun Table Interface Memory Divisors Register LRTI_MEM_DIV 8086 801Bh | RO 152 
LongRun Table Interface I/O Divisors Register LRTI_DIV_IO 8086 801Ch | RO 152 
LongRun Table Interface Gate Delay Register LRTI_GATE 8086 801Dh | RO 152 
Checksum Over Non-BIOS ROM Portion Register ROM_CHECKSUM 8086 8070h_ | RO 152 
Pending Break Control Register PENDING_BREAK_CTL 8086 8071h RW 153 
CMS Boot Revision and Build Number Register BOOT_REVISION_ID 8086 8074h | RO 153 
Active CMS Configuration Register RECOVERY_INFO 8086 8075h RO 153 
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cpuip_trMs CPUID Type, Family, Model, and Stepping Register 


8086 0000h 


These values enable OEMs to modify the values returned by CPUID function 0000 0001, output register EAX. 


For more information see CPUID Function 0000 0007h on page 125. 


Index Register Name Access 

8086 0000h CPUID_TFMS RW 

Bit(s) Description 

63:32 Reserved 

31:16 Value the value reported in uppoer 16 bits of CPUID 0000 0001h, output register EAX. 
15:12 CPUID Type—Value reported by CPUID 0000 0001h, output register EAX. 

11:8 CPUID Family—Value reported by CPUID 0000 0001h, output register EAX. 

7:4 CPUID Model—Value reported by CPUID 0000 0001h, output register EAX. 

3:0 CPUID Stepping—Value reported by CPUID 0000 0001h, output register EAX. 


ceuin_vnoit:3} CPUID Vendor ID String Registers 


8086 0001h 


—8086 0003h These three MSRs enable OEMs to specify the vendor ID string reported by the CPUID instruction for 
function 0000 0000h in registers EBX, EDX, and ECX (see CPUID Function 0000 0000h on page 125). The 
MSRs form a contiguous string and map to CPUID return values as shown in the table below. 


Index Register Name Access Reports to Register... 
8086 0001h CPUID_VND1 RW EBX 

8086 0002h CPUID_VND2 EDX 

8086 0003h CPUID_VND3 ECX 

Bit(s) Description 

63:32 Reserved 

31:16 VND#—These bits are reported directly into the registers shown above. 


cpuipn_mask CPUID Feature Flag Mask Register 


8086 0004h 


This MSR enables masking of the feature flags reported by the CPUID instruction for function 0000 0001h in 
register EDX (see CPUID Function 0000 0007h on page 125). 


Index Register Name Access 

8086 0004h CPUID_MASK RW 

Bit(s) Description 

63:32 Reserved 

31:16 Mask—lf a bit is set to 0 in this mask, then the corresponding feature flag is forced to 0; 
otherwise the corresponding feature flag is reported without changes. 
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LONGRUN 
8086 8010h 


LONGRUN_FLAGS 
8086 8011h 


LongRun™ Control and Status Register 


When LongRun is available, this MSR allows you to select the processor’s performance window, and query 
the current performance window. Use CPUID function 8086 0001h to test whether LongRun support is 
available. Additional LongRun status information can be queried via CPUID function 8086 0007h. Both of 
these functions are described in CPU/D Function 8086 0007h on page 134. 


Index Register Name Access 
8086 8010h LONGRUN RW 


Bit(s) Description 
63:39 Reserved 


38:32 LongRun Upper Performance Boundary—Upper boundary of the performance window, 
returned in register EDX on RDMSR. Must be no larger than 0000 0064h (100d, or 100%) 


31:7 Reserved 
6:0 LongRun Lower Performance Boundary—Lower boundary of the performance window, 


returned in register EAX on RDMSR. Must be no larger than 0000 0064h (100d, or 100%) 


Use WRMSR to specify the desired performance window. Specifying boundary values outside the range 
0000 0000h—0000 0064h causes a GP# fault, as does specifying a lower boundary that is greater than the 
upper boundary. 


A performance window can be achieved by specifying an upper and lower boundary. A fixed performance 
level can be achieved by specifying the same value for the upper and lower boundary. Setting both 
boundaries to 0000 0064h disables LongRun and results in maximum performance, but short battery lifetime. 
By contrast, setting both boundaries to 0 results in minimum performance, but best battery lifetime. 


The processor will round the specified values up or down to the nearest value, depending on how many 
performance levels are supported. If both directions of rounding are possible, then the processor will round 


up. 


Use RDMSR with this MSR to query the current performance window. Notice that the processor returns 
rounded values; thus they may or may not match the most recently written values. The upper boundary is 
returned in EDX, the lower boundary is returned in EAX. 


LongRun Flags Register 


This MSR provides control over LongRun features and modes. Support for this MSR is indicated by a 
Transmeta feature flag (LongRun) returned by CPUID instruction 8086 0001h, value EDX, bit 1. See 8086 
0001h on page 16. 


Index Register Name Access 
8086 8011h LONGRUN_FLAGS RW 


Bit(s) Description 

63:1 Reserved 

0 LongRun Mode—Controls whether LongRun is in economy mode (0) or performance mode (1). 
In economy mode, the processor attempts to maximize battery lifetime by powering down 


aggressively. By contrast, in performance mode, the processor attempts to maximize 
performance by powering down conservatively. 
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LRTI_LREADOUT 
8086 8018h 


LRTI_PERF 
8086 8019h 


LongRun Table Interface Readout Register 


This MSR can be used to query the number of LongRun performance levels supported. The levels are 
enumerated starting with zero; level zero is always the level with the highest performance. On read, EDX 
shows the maximum level number, and EAX shows the currently selected level number. The upper 32 bits 
are ignored on WRMSR. Trying to select a non-existing level causes #GP(0). 


Support for this MSR is indicated by a Transmeta feature flag (LRTI) returned by the CPUID instruction. 


Index Register Name Access 

8086 8018h LRTI_READOUT RW 

Bit(s) Description 

63:32 Maximum Supported LongRun Level—Maximum supported LongRun level. 
31:0 Currently Selected LongRun Level—Currently selected LongRun level. 


LongRun Table Interface Performance Index Register 


This MSR returns the performance index value corresponding to the currently selected LongRun level (see 
LRTI_READOUT on page 151). If the field is not applicable, a value of zero is reported. Support for this MSR 
is indicated by a Transmeta feature flag (LRTI) returned by the CPUID instruction. 


Index Register Name Access 
8086 8019h LRTI_PERF RO 


Bit(s) Description 
63:32 Reserved 
31:0 Performance Index for Selected Level—Expressed as a percentage. 


irt_voir_mHz LOngRun Table Interface Voltage/Frequency Register 


8086 801Ah 


This MSR returns the voltage/frequency register corresponding to the currently selected LongRun level (see 
LRTI_READOUT on page 151). If the field is not applicable, a value of zero is reported. Support for this MSR 
is indicated by a Transmeta feature flag (LRTI) returned by the CPUID instruction. 


Index Register Name Access 
8086 801Ah LRTI_VOLT_MHZ RO 


Bit(s) Description 
63:32 Voltage for Selected Level—Expressed in mV. 
31:0 Frequency for Selected Level—Expressed in MHz. 
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LRTI_MEM_DIV 
8086 801Bh 


LRTI_DIV_IO 
8086 801Ch 


LRTI_GATE 
8086 801Dh 


ROM_CHECKSUM 
8086 8070h 


LongRun Table Interface Memory Divisors Register 


This MSR returns the DDR memory divisor. This register always returns the same value, regardless of 
LongRun level. If the field is not applicable, a value of zero is reported. Support for this MSR is indicated by a 
Transmeta feature flag (LRTI) returned by the CPUID instruction. 


Index Register Name Access 
8086 801Bh LRTI_MEM_DIV RO 


Bit(s) Description 
63:32 DDR Memory Divisor for Selected Level 
31:0 Reserved—SDR not supported on the TM8000. 


LongRun Table Interface I/O Divisors Register 


This MSR returns the I/O divisor. This register always returns the same value, regardless of LongRun level. If 
the field is not applicable, a value of zero is reported. Support for this MSR is indicated by a Transmeta 
feature flag (LRTI) returned by the CPUID instruction. 


Index Register Name Access 
8086 801Ch LRTI_DIV_IO RO 


Bit(s) Description 
63:32 Bus Divisor for Selected Level 
31:0 PCI Divisor for Selected Level 


LongRun Table Interface Gate Delay Register 


This MSR returns the gate delay value corresponding to the currently selected LongRun level (see 
LRTI_READOUT on page 151). If the field is not applicable, a value of zero is reported. Support for this MSR 
is indicated by a Transmeta feature flag (LRTI) returned by the CPUID instruction. 


Index Register Name Access 
8086 801Dh LRTI_GATE RO 


Bit(s) Description 
63:32 Reserved 


31:0 Measured Gate Delay for Selected Level—Expressed in fs. 


Checksum Over Non-BIOS ROM Portion Register 


This MSR returns a checksum of the portion of ROM that does not include the BIOS. 


Index Register Name Access 
8086 8070h ROM_CHECKSUM RO 
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penownc_sreaK cr. Pending Break Control Register 


8086 8071h 
This MSR controls pending break (PBE) support. 
Index Register Name Access 
8086 8071h PENDING_BREAK_CTL RW 
Bit(s) Description 
63:3 Reserved 
2 Indicates the polarity of the GPIO where 1 is active high and 0 is active low. 
1 Indicates delivery of PBE through GPIO. 
0 Indicates delivery of PBE through the HT Packet Delivery mechanism according to HT spec 
1.05. NOTE: This setting is not recommended at this time. 


penpinc Break ct. CMS Boot Revision and Build Number Register 
8086 8074h 


This MSR returns the Code Morphing Software boot revision and build number. On read, EAX shows the 
revision number, and EDX shows the build number. . 


Index Register Name Access 
8086 8074h BOOT_REVISION_ID RO 


Bit(s) Description 
63:32 Code Morphing Sofware build number 


31:0 Code Morphing Software boot revision number 


penpinc_Break ct. ACtive CMS Configuration Register 
8086 8075h 
This MSR controls pending break (PBE) support. 


Index Register Name Access 

8086 8075h RECOVERY_INFO RO 

Bit(s) Description 

63:3 Reserved 

2 1 indicates recovery OEM table is active. 0 indicates primary OEM table is active 
1 1 indicates recovery Boot code is active, 0 indicates primary Boot Code is active 
0 1 indicates recovery CMS is active, 0 indicates primary CMS Code is active 
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Chapter 9 


System Management 


9.1 


9.1.1 


Mode (SMM) 


The TM8000 supports System Management Mode (SMM). SMM is intended for use only by system firmware 
and is typically used for system power management functions. SMM offers a distinct processor operating 
environment that is transparent to the operating system and software applications. 


SMM Execution Cycle 


When a System Management Interrupt (SMI) is recognized, the processor saves a substantial part of its 
current state in the State Save Map (SSM), initializes some registers to provide the SMM executidon 
environment, and then begins execution inside SMM. During SMI, the SSM fields are only written to, but not 
read from. The writes use physical addresses, i.e. segmentation or paging checks are not performed. 


The execution inside SMM ends when the processor encounters the next RSM instruction. At that point it 
restores a substantial part of its state from the SSM, and then resumes operation. Optionally, the resume 
process may include the use of the auto-halt restart or I/O instruction restart feature. During RSM the SSM 
fields are only read from, but not written to. The reads use physical addresses, i.e. segmentation or paging 
checks are not performed. RSM branches to the location specified by the SSM. Any exception on that branch 
target (eg. segment limit violation #GP, code fetch #PF, etc.) is generated after the RSM has been completed. 


SMM Execution Environment 


State Save Prior to Power Off 


If software uses SMM for the purpose of implementing a power management state during which the power is 
removed from the processor, then the entire 512-byte SMM State Save Map (offset 7EOOh-7FFFh) must be 
saved and restored for proper operation. Additionally, the following registers should also be saved and 
restored: CR2, DRO, DR1, DR2, DR3, FP, MMX, and SSE (XMM) registers, and MSRs. 
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9.1.2 


Table 15: 


Address Space Caching 


The SMM address space is cacheable, subject to the MTRRs. When the MTRRs are programmed so that the 
SMM address space is write-back cacheable (the recommended setting), The TM8000 makes sure that the 
internal caches remain consistent. 


External Interrupts in SMM 


When the processor enters SMM, all hardware interrupts are disabled. This includes SMI, NMI, INIT, INTR, 
single-step traps and breakpoint traps. If an SMI signal is asserted while servicing is disabled, then the new 
assertion is serviced when the current SMI is finished being serviced. The new SMI occurrence is latched and 
serviced immediately after the processor executes the RSM instruction for the current SMI. If an NMI or INIT 
occurs while the processor is in SMM, one occurrence of the interrupt is latched until either an IRET or RSM 
instruction is executed. Once an IRET instruction has been executed within SMM, NMI and INIT requests are 
enabled and serviced immediately. 


Upon entry to SMM, the state of A20M is changed to unmasked. The state of A2Z0M may not be changed 
while operating in SMM. The CPU restores the original A20M state when the RSM instruction is executed. 
INTR, single step traps and breakpoints may be enabled from within SMM. However, an SMM interrupt table 
and necessary interrupt handlers must be created from within SMM to properly service these interrupts. 


The value of EFLAGS after SMI implies that INTRs are disabled. They can be enabled inside SMM by setting 
EFLAGS.IF=1. If SMI is recognized inside SMM, then one occurrence is latched, and serviced back-to-back 
after RSM has been executed. Finally, both NMI and INIT are blocked inside SMM. Again, one occurrence of 
either interrupt can be latched, while servicing NMI and INIT can be enabled by executing an IRET or RSM 
instruction. If NMI was already blocked when the SMI occurred, then RSM will restore that blocking. 


INIT will also be enabled if a shutdown occurs inside SMM, to allow the processor to restart. Note that the 
processor services pending INITs, NMls, and INTRs (if they are not blocked, disabled, or delayed, that is) 
before executing the RSM instruction. 


SMM Entry State 


The processor enters SMM as the result of servicing an SMI. When an SMI is received, the processor first 
saves the current operating environment in the state save map area and then reprograms the processor’s 
registers in preparation for servicing the SMI. 


The following table lists the state of the registers that are reprogrammed when entering SMM. As shown, the 
PE and PG flags in CRO are cleared when entering SMM. This places the processor in an operating mode 
similar to real address mode but with the following differences: 


* Segment limits are 4 GBytes. 


. The default operand and address sizes are set to 16 bits, as in real mode. This restricts the address 
space to 1 MB. However, size override prefixes can be used to access the address space above 1 MB. 


The following registers are set to fixed values after an SMI, to provide the initial SMM execution environment. 
Treat any registers that are not listed in this table as reserved. Reserved registers remain unmodified. 


Initial Processor State After SMI 


Register Value After SMI 
CS selector 3000h 
CS base SMBASE 
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Table 15: 


9.1.3 


Initial Processor State After SMI (Continued) 


Register Value After SMI 

CS limit FFFF_FFFFh 

CS access rights OO9Bh 1 

SS, DS, ES, FS, GS selector 0000h 

SS, DS, ES, FS, GS base 0000_0000h 

SS, DS, ES, FS, GS limit FFFF_FFFFh 

SS, DS, ES, FS, GS access rights 0093h 

EFLAGS 0000_0002h 

EIP 0000_8000h 

CRO PE, EM, TS, and PG cleared 
CR4 0000_0000h 

DR7 0000_0400h 

FERR# unmodified 

A20M# flat 2 

PDPTRO, PDPTR1, PDPTR2, PDPTR3 | 0000_0000_0000_0000h 
processor caches coherency is ensured, no WBINVD is required 


1. Whether or not CS is writable depends on the processor mode. In real and virtual 8086 mode, CS is 
always writable; but CS can never be written in protected mode. 
2. Changing the state of A20M# is not supported while executing inside SMM. 


SMM Resume Features 


SMBASE Relocation 


The base address of the SMRAM is contained in an internal register called the SMBASE register (see 
SMBASE Register on page 165 and SMM Address Space on page 159). The default value after a processor 
RESET is 0003_0000h (see Chapter 11, B/OS: Initial State). The SMBASE register is part of the SSM. 


The contents of the SMBASE register can be changed by writing the SMBASE field’s value in the SSM, and 
executing a RSM instruction. The new SMBASE value takes effect on the next assertion of SMI. The 
SMBASE value must be aligned to a 32 KB boundary; trying to load a misaligned value with the RSM 
instruction causes a processor shutdown. 


Auto-Halt Restart 


The processor may have executed a HLT instruction prior to servicing an SMI; that is, the processor may 
have been in the halt state. If so, then this fact is recorded in the auto-halt restart field of the SSM. 


The SMM handler may clear the auto-halt restart field prior to executing the RSM instruction, to prevent 
entering the halt state again after RSM. Entering the halt state again after RSM provokes a halt bus 
transaction. This results in multiple halt bus transactions for the same HLT instruction. 


Transmeta processors also support setting the auto-halt restart field to make the processor enter the halt 
state after RSM, even if the flag was not set when SMM was entered. This allows entering processor states 
that cannot be entered by other means, such as being in the halt state while the CPL is not 0 (note that HLT 
is a privileged instruction). 
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9.1.4 


1/O Instruction Restart 


The processor may have attempted to execute an I/O instruction just prior to servicing an SMI. For example, 
the I/O instruction may have tried to access a powered-down device, in response to which the system logic 
asserted the SMI signal to the processor, without completing the I/O instruction itself. If so, then the SMM 
handler may choose to re-execute the I/O instruction after RSM. 


The SMM handler may set the I/O instruction restart field prior to executing the RSM instruction, in order to re- 
execute an I/O instruction. It is the responsiblity of the SMM handler to detect the I/O instruction and to control 
the I/O instruction restart field. 


The processor stores additional information in the SSM, to support the I/O instruction restart feature for the 
INS and OUTS instructions. The behavior of setting the I/O instruction restart field without actually resuming 
to an I/O instruction is unspecified. 


The processor resumes EIP, ECX, ESI, and EDI from their I/O instruction restart fields in the SSM. The Intel 
P5 and P6 cores differ with regard to when the internal registers corresponding to these SMM SSM fields get 
updated. A P6 core updates them regardless of whether or not INS or OUTS instructions with a repeat prefix 
carry out a single iteration. Transmeta processors implement Intel P6-core behavior. 


In addition, during RSM, Transmeta processors always restore the I/O instruction restart fields into their 
corresponding internal registers. 


SMM Exit Considerations 


The processor exits SMM following execution of a RSM instruction. The RSM instruction can only be 
executed while the processor is in SMM. If RSM is executed during normal operation, an invalid opcode 
exception is generated. The RSM instruction causes the processor to restore all values saved in the SMM 
state save map and then return control back to the interrupted program. 

Consider the following conditions prior to executing the RSM instruction: 

* SMBASE relocation 

* — interrupted HALT state 


« — interrupted I/O instruction 


SMBASE Relocation 


The SMBASE address may be relocated by modifying the SMBASE value in the SMM state save area prior to 
executing RSM. The SMBASE value must be aligned to a 32-KByte boundary. Attempting to load a 
misaligned value with the RSM instruction causes a processor shutdown. 


Auto HALT Restart 


If the processor was in a HALT state when the SMI occurred, the Auto HALT Restart flag in the SMM state 
save area will be set (bit 0, offset 7FO2h). Prior to executing RSM, the SMI handler should check this flag and 
then implement one of the following if the flag is set: 


« Leave the Auto Halt Restart flag set which causes the RSM instruction to return control to the interrupted 
HLT instruction. The processor then reissues a halt bus transaction and reenters the HALT state. 
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* Clear the Auto Halt Restart flag which causes the RSM instruction to return control to the instruction 
following the HLT instruction. 


1/O Instruction Restart 


If the SMI handler determines that the processor was executing an I/O instruction when the SMI occurred, the 
I/O instruction may be re-executed following the RSM instruction by using the I/O Instruction Restart flag 
(offset 7FOOh) in the SMM state save area. If the I/O Instruction Restart flag is set to OOFFh, the RSM 
instruction returns control to the interrupted |/O instruction. If the I/O Instruction Restart flag is O000h (default 
value), the RSM instruction returns control to the next instruction or, in the case of a repeated I/O instruction, 
to the next iteration of the interrupted instruction. The processor stores additional information in the SMM 
state save area to support the I/O instruction restart feature for the INS and OUTS instructions. 


SMM Address Space 


The TM8000 VNB supports the use of the main system SDRAM memory as System Management RAM 
(SMRAM) enabling the use of System Management Mode (SMM). 


SMRAM space provides a memory area that is available for the System Management Interrupt (SMI) 
handler's code and data storage. The SMRAM is normally hidden from the operating system, so the 
processor has immediate access to this memory space upon entry to SMM. The VNB provides three SMRAM 
options: 


* Below 1 MB option that supports compatible SMI handlers in the Compatible A region located from 
A0000h to BFFFFh. 


* Above 1 MB option that allows new SMI handlers to execute with write-back cacheable SMRAM in the 
High H region. The H region is located at the 128 KB range above HSEG_BASE. The SMRAM accesses 
in this region are routed to SDRAM at addresses A0000h to BFFFFh. 


* Optional larger write-back cacheable Extended T region in increments of 128 KB. Note that if an attempt 
is made to write a value greater than (TOM - 1) MB to the TSEG_SIZE register, it is silently limited, so as 
to leave 1MB of DRAM accessible to non-SMM mode x86 programs. This SMRAM region is located from 
(TOM - TSEG_SIZE) to TOM. 


The TM8000 provides SMRAM support which is very compatible with both the Intel 82443BX and the Intel 
815E northbridge chips. Table 16 on page 160 shows a comparison of the SMRAM support for the Intel and 
Transmeta northbridge implementations: 


* The Transaction Range is the address range where the SMI handler code and data references go, as 
opposed to SMRAM Range described below. 


* The SMRAM range is the actual memory address range in memory where the transaction range is 
routed to in the SDRAM, as opposed to the Transaction Range described above. 


* The Compatible Region also supports split code and data references where code references go to 
the transaction and are mapped to the SMRAM range—data references to the transaction range do not 
get routed to the SMRAM but instead are routed to the AGP bus or to the HT bus. 


* Write-back Cacheability is the normal setting for the SMRAM but the cacheability of SMRAM is 
determined by the MTRR and PAT settings for the original transaction range of memory for the SMRAM. 
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Table 16: 


Table 17: 


The Compatible A region can be made write-back cacheable because the TM8000 processor never 
caches transactions that are routed to the AGP bus or the HT bus. This is a difference from Intel 
northbridge chips and represents a performance improvement for the TM8000 processor when using the 


Compatible A region. 


SMM address space should be initialized prior to executing the system management interrupt (SMI) handler 


code. 


The following table summarizes the resulting SMRAM differences between a Intel 82443BX northbridge and 
the Transmeta TM5x00 and TM8000 Virtual Northbridges. (The TM5x00 is shown for reference only.) 


SMRAM Differences Between Intel and Transmeta Northbridge Functionality 


Split 
Code/ 
Write-Back | Data 
Device Region Transaction Range SMRAM Range Cacheable Support 
Transmeta | Compatible | A0000h to BFFFFh AQO000h to BFFFFh_ | Yes, no DMA | Yes 
TM8000 A region support 
VNB High HSEG_BASE to A0000h to BFFFFh | Yes, no DMA | No 
H region (HSEG_BASE + 128K) support 
Extended (TOM - TSEG_SZ) to TOM | (TOM-TSEG_SZ) | Yes, no DMA | No 
T region to TOM support 
Intel815E | Compatible | A0000h to BFFFFh A0000h to BFFFFh_ | No Yes 
A region 
High FEEA 000h to A0000h to BFFFFh_ | Yes No 
H region FEEB FFFFh 
Extended (TOM - TSEG_SZ) to TOM | (TOM-TSEG_SZ) | Yes No 
T region to TOM 
Intel Compatible | A0000h to BFFFFh A0000h to BFFFFh_ | No Yes 
82443BX A region 
High 256M + A0000h to A0000h to BFFFFh_ | Yes No 
H region 256M + BFFFFh 
Extended 256M + (TOM -TSEG_SZ) | (TOM-TSEG_SZ) | Yes No 
T region to (256M + TOM) to TOM 
Transmeta | Compatible | A0000h to BFFFFh (TOM + 896K) to Yes No 
TM5x00 A region (TOM + 1024k) 
VNB High (TOM + 896K) to (TOM + 896K) to _| Yes No 
H region (TOM + 1024k) (TOM + 1024k) 
Extended TOM to (TOM + 896k) TOM to Yes No 
T region (TOM + 896k) 


The following table, SMWRAM Region Decode, shows the effect of the G_LSMRAM_EN bit in the SMRAM_CR 
register and the H_SMRAM_EN bit in the E_LSMRAM_CR register on which SMRAM region is enabled. 


SMRAM Region Decode 


G_SMRAMN_EN | H_SMRAM_EN | T_.SMRAM_EN | TSEG_SIZE | ARegion | H Region | T Region 
0 Xx Xx Xx disabled disabled disabled 
i) 0 Xx 0 enabled disabled disabled 
1 0 0 Xx enabled disabled disabled 
4 0 1 128K min enabled disabled enabled 
1 1 Xx 0 disabled enabled disabled 
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9.3 


SMRAM Region Decode (Continued) 


G_SMRAWN_EN | H_SMRAM_EN | T_.SMRAM_EN | TSEG_SIZE | ARegion |H Region | T Region 
1 1 0 x disabled enabled disabled 
1 1 1 128K min disabled enabled enabled 


The following table, SMRAM Decode Control, defines the control of the access routing for all code fetches 
and data accesses to the SMRAM regions. The G_LSMRAM_EN bit in the SM_RAM_CR register (see 
SM_RAM_CR on page 66) provides a global disable for all SMRAM memory. The SM_OPEN bit allows x86 
software to write to the SMRAM regions without being in SMM. BIOS software can use this bit to initialize 
SMM code at power up. The SM_LOCK bit limits the SMRAM access to SMM software only. It also locks all 
of the control bits and the TSEG_SIZE and HSEG_BASE register to prevent software from changing the 
SMM region once the BIOS has configured the SMM software at power up. The SM_CLOSE bit allows 
accesses to the VGA video memory buffer when the Compatible A region is being used for the SMM 
software. This uses the split code/data access hardware in the northbridge to route the data accesses to the 
VGA memory while code fetches are routed to SMRAM. 


SMRAM Decode Control 


SMRAM 
SMRAM Data 

G_SMRAM_EN | SM_LOCK |SM_CLOSE | SM_OPEN | SMM Mode | Code Fetch | Read/Write 
0 Xx Xx Xx Xx Disabled Disabled 
it 0 Xx 0 No Disabled Disabled 
1 0 0 0 Yes Enabled Enabled 
1 0 0 1 Xx Enabled Enabled 
i 0 1 0 Yes Enabled Disabled 
1 0 1 1 Xx Invalid Invalid 
it 1 Xx 0 No Disabled Disabled 
1 1 0 0 Yes Enabled Enabled 
1 1 1 0 Yes Enabled Disabled 
1 1 X 1 X Invalid Invalid 


Only uncacheable SMM regions may overlap HT or AGP device mappings. Non-SMM software may not 
access HT or AGP memory behind cacheable SMM regions. SMM regions may not overlap the AGP graphics 
aperture. HT and AGP masters cannot access the SMM space. 


Initialization and State Change 


The recommended SMM initialization sequence is: 


1. Program SM_RAM_CR and ESM_RAM_CR as desired to select the desired SMM memory 
configuration. 


2. Open SMM memory space by setting the SM_OPEN bit in SM_RAM_CR to 1. 
3. Transfer the normal SMI handler to the SMM address space. 


4. Close SMM memory space by clearing the SM_OPEN bit. 
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Table 19: 


5. Reprogram SMBASE by doing the following: 


a. Setupa temporary SMI handler at the default entry point (38000h). The purpose of the temporary 
SMI handler is to reprogram the SMM Base Address in the SMM state save area so that it aligns 
with the normal SMI handler. 


b. Generate a test SMI using logic in the PCI-to-ISA bridge (southbridge) to execute the temporary SMI 
handler. 


6. Generate a second test SMI to verify proper operation of the normal SMI handler. 


7. Optionally, set the SM_LOCK bit in the SM_RAM_CR register to 1 to lock down the SMM configuration. 


State Save Map Layout 


When a system management interrupt (SMI) occurs, the processor saves its current operating state in the 
SMM state save area prior to executing the SMI handler. 


The State Save Map (SSM) consists of a 512 byte region that starts at offset 7EOOh and ends at offset 
7FFFh, relative to the SMM entry point, which in turn is equal to SMBASE + 8000h. Not all of the processor’s 
state is held by the SSM; the following are some of the items that are not part of the SSM, and thus need to 
be saved and restored separately: 


* control register CR2 

. debug registers DRO, DR1, DR2, and DR3 

* FPU, MMX, and SSE (XMM) registers (incl. state of FERR# and IGNNE#) 

*  Model-Specific Registers (MSRs) 

If software uses SMM for the purpose of implementing a power management state during which power is 
removed from the processor, then the entire 512 byte SSM must be saved and restored, to ensure proper 
operation. Locations that are not listed in the following table should be treated as reserved. 

The following table details the SMM state save map. The offset shown is relative to the SMI handler entry 


point (SMBASE+8000h). Some of the locations in the state save map are “reserved”. Software should not 
modify or rely on the value of reserved locations. 


SMM State Save Map 


Offset Size Description 
7EOOh—7ECFh Reserved (not written during SMI) 
7EDOh qword | PDPTRO 

7ED8h qword | PDPTR1 

7EEOh qword | PDPTR2 

7EE8h qword | PDPTR3 

7EFOh dword | Reserved 

7EF4h dword | Transmeta-specific field 
7EF8h dword | SMBASE field 

7EFCh dword | SMM revision ID field 
7FOOh word I/O instruction restart field 
7FO2h word auto-halt restart field 
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Offset Size Description 

7F04h dword | |/O instruction restart EDI 
7FO8h dword | I/O instruction restart ECX 
7FOCh dword | I/O instruction restart ESI 
7F10h dword | |/O instruction restart EIP 
7F14h-7F27h reserved (not written during SMI) 
7F28h dword | CR4 

7F2Ch—7F2Fh reserved (not written during SMI) 
7F30h dword | ES limit (32-bit) 

7F34h dword | ES base 

7F38h dword | ES access rights 

7F3Ch dword | CS limit (32-bit) 

7F40h dword | CS base 

7F44h dword | CS access rights 

7F48h dword | SS limit (32-bit) 

7F4Ch dword | SS base 

7F50h dword | SS access rights 

7F54h dword | DS limit (32-bit) 

7F58h dword | DS base 

7F5Ch dword | DS access rights 

7F60h dword | FS limit (32-bit) 

7F64h dword | FS base 

7F68h dword | FS access rights 

7F6Ch dword | GS limit (32-bit) 

7F70h dword | GS base 

7F74h dword | GS access rights 

7F78h dword | LDTR limit (32-bit) 
7F7Ch dword | LDTR base 

7F80h dword | LDTR access rights 
7F84h dword | GDTR limit (32-bit) 
7F88h dword | GDTR base 

7F8Ch dword | GDTR access rights 
7F90h dword | IDTR limit (32-bit) 

7F94h dword | IDTR base 

7F98h dword | IDTR access rights 
7F9Ch dword | TR limit (32-bit) 

7FAOh dword | TR base 

7FA4h dword | TR access rights 

7FA8h dword | ES selector 

7FACh dword | CS selector 

7FBOh dword | SS selector 

7FB4h dword | DS selector 
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Table 19: 


7EF4h 


SMM State Save Map (Continued) 
Offset Size Description 
7FB8h dword | FS selector 
7FBCh dword | GS selector 
7FCOh dword | LDTR selector 
7FC4h dword | TR selector 
7FC8h dword | DR7 
7FCCh dword | DR6 
7FDOh dword | EAX 
7FD4h dword | ECX 
7FD8h dword | EDX 
7FDCh dword | EBX 
7FEOh dword | ESP 
7FE4h dword | EBP 
7FE8h dword | ESI 
7FECh dword | EDI 
7FFOh dword | EIP 
7FF4h dword | EFLAGS 
7FF8h dword | CR3 
7FFCh dword | CRO 


SMM Fields 


The following fields are described in this section: 


Field Name Addr Offset Size Access _| Initial Value Pg 
Transmeta-Specific Field 7EF4h dword 164 
SMBASE Register 7EF8h dword 165 
SMM Revision ID Field 7EFCh dword 165 
I/O Instruction Restart Field 7FOOh word 165 
Auto-Halt Restart Field 7FO2h word 166 


Transmeta-Specific Field 


This field provides set points for pre-SMI states. Note: do not assume that a bit is false if its value is O, or true 


if its value is 1. 


Field Name Addr Offset Size Access Initial Value 
Transmeta-Specific Field 7EF4h dword 

Bit(s) | Access /| Function Description 

31:22 Reserved 

21 Pre-SMI State of A2Z0M# (PS/2) 
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Bit(s) | Access | Function Description 

20 Pre-SMI State of A2Z0M# (KBC) 
19:4 Reserved 

3 Pre-SMI State of BLOCK_NMI Flag 
2:0 Reserved 


7eFsh SMBASE Register 


This field provides the base value for SMM address space. For more information, see SMM Address Space 
on page 159. Also see See SMM Resume Features on page 157 and SMM Exit Considerations on page 158. 


Field Name 


Addr Offset Size Access Initial Value 


SMBASE Field 


7EF8h dword 30000h 


Bit(s) | Access 


Function Description 


31:0 


SMM Base Address—The minimum address space starts at the SMM base address 
in this field, plus an offset of 8000h, and ends at SMBASE plus an offset of FFFFh. 
SMBASE is 30000h initially. 


The SMBASE value can be modified in the SMM state save map from within an SMI 
service routine. The SMBASE value must always be aligned on a 32 KByte boundary. 
If SMBASE is set to a non-aligned value in the state save map, a shutdown occurs 
during execution of the RSM instruction. 


7EFch SMM Revision ID Field 


This field provides the SMM revision ID as well as flags for SMBASE Relocation and I/O Instruction Restart 


support. 

Field Name Addr Offset Size Access Initial Value 

SMM Revision ID Field 7EFCh dword 0002 0002h 

Bit(s) | Access | Function Description 

31:18 Reserved 

17 SMBASE Relocation Support—If this bit is 1, SMBASE relocation is supported. If this 
bit is 0, SMBASE relocation is disallowed. Default value: 1 

16 /O Instruction Restart Support—f this bit is 1, I/O instruction restart is supported. If 
this bit is 0, I/O instruction restart is disallowed. Default value: 1 

15:0 SMM Revision Identifier—Default value: 0002h 


7F00oh_ I/O Instruction Restart Field 


This field provides a method for enabling or disabling I/O instruction restart. Also see See SMM Resume 
Features on page 157 and SMM Exit Considerations on page 158. 


Field Name 


Addr Offset Size Access Initial Value 


SMBASE Field 


7FO0Oh word 30000h 
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Bit(s) | Access /| Function Description 
31:16 Reserved 
15:0 /O Instruction Restart— 


0000h: processor should not restart I/O instruction 
OOFF: if processor should restart I/O instruction 


Note that setting any of the lowest eight bits to 1 has the same effect as using OOFFh. 


If the processor restarts an I/O instruction, then EIP, ECX, ESI, and EDI are resumed 
from their I/O restart fields in the SSM, rather than from their regular fields in the SSM. 


7Fo2zh_ Auto-Halt Restart Field 


This field provides a method for enabling or disabling auto-halt restart. Also see See SMM Resume Features 
on page 157 and SMM Exit Considerations on page 158. 


Field Name Addr Offset Size Access Initial Value 
Auto-Halt Restart Field 7FO2h word 


Bit(s) | Access | Function Description 
31:1 Reserved 
0 Auto-Halt Restart—On read: 


0: processor was not in halt state: 
1: if processor was in halt state 


On set: 


0: processor should not resume to halt state 
1: processor should resume to halt state 


Resuming to halt state is achieved by directly entering the halt state, instead of 
re-executing the instruction at EIP-1. 
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Chapter 10 


Startup and Reset 


This section describes the reset and startup support for the TM8000 processor and the effects on the Virtual 
Northbridge (VNB). 


10.1 Bootup 


This section will describe the bootup support in a future revision. 


10.2 ROM Support 


This section will describe the ROM support in a future revision including BIOS control of the ROM and Code 
Morphing software security issues associated with the ROM. 
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11 


BIOS: Initial State 


Virtual Northbridge Initial State 


The following tables show default values for registers in the VNB. See the relevant sections for details. 


/O Mapped Register Summary 
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Register Name I/O Location Default Value Pg 

PM_CR2 value of PM_CR2_ADDR 00h 46 

CONFADDR OCF8h 0000 0000h 47 

CONFDATA OCFCh 0000 0000h 48 

PCI Host-to-HT Bridge Registers (Dev 0, Fn 0) Summary 
Register Name Address _ | Default Value Pg || Register Name Address | Default Value | Pg 
VID 00-01h 1279h 51 PM_CR2_OPT 7Bh 00h 67 
DID 02-03h 0060h 51 SMAFD 7C-7Fh FB1A 8732h 68 
CMD 04-05h 0000h 52 SBE_ADDR 80-83h 0000 0000h 69 
STS 06-07h 0010h 52 MBE_ADDR 84-87h 0000 0000h 69 
RID 08h 00h 53 ERRCMD 90h 80h 70 
PI 09h 00h 53 ERRSTS 91-92h 0000h 71 
SUBC OAh 00h 53 UP_ROM_SZ 94-95h 0100h 72 
BCC OBh 06h 53 LOW_ROM_SZ 96-97h 0100h 72 
CLS OCh 00h 54 ROM_FRBDN 98-99h 0000h 73 
MLT ODh 00h 54 ROM_PRTCTD 9A-9Bh OEM-defined | 73 
HDR OEh 80h 54 AGPCAPID AOh 02h or 00h 74 
BIST OFh 00h 54 AGPNEXTCAP Ath D8h or 00h 74 
APBASE 10-13h 0000 0008h 55 AGPVER A2h 20h or 00h 74 
SVID 2C-2Dh 0000 0000h 55 AGPSTAT A4h-A7h | OFO0_0203h 75 
SID 2E-2Fh 0000 0000h 56 AGPCMD A8h-ABh_ | 0000 0000h 75 
CAPPTR 34h AOh/D8h 56 AGPCTRL BO-B3h 0000 0080h 77 
CMSMIN 48-49h OEM-specified 56 APSIZE B4h 30h 77 
value 
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PCI Host-to-HT Bridge Registers (Dev 0, Fn 0) Summary (Continued) 


Register Name Address _ | Default Value Pg || Register Name Address | Default Value | Pg 
TOM 4A-4Bh Depends on 57 ATTPAGE B8-BBh 0000 0000h 78 
memory capacity 
CMSMEM 4C-4Dh OEM-specified 57 OEM_UPGRADE_ID[0:1] | CO-C7h OEM-defined | 83 
value 
CMSMAX 4E-4Fh OEM-specified 57 OEMOPTO C8-CBh OEM-defined | 79 
value 
NBCFG 50-53h 0000 0000h 58 OEMOPT1 CC-CFh OEM-defined | 79 
NC_LEGACY 58h 20h 59 BSPADO DO-D3h 0000 0000h 
PABO-—PAB6 59-5Fh 00h 60 BSPAD1 D4-D7h 0000 0000h 80 
NC_MMIO_BASEO | 60-6%h 0010h 61 HTCAP D8h 08h 
NC_MMIO_LIMITO | 62-63h 0000h 61 HTNEXTCAP D9h 00h 80 
NC_MMIO_BASE1 | 64-65h 0010h 61 HTCMD DA-DBh 2001h 80 
NC_MMIO_LIMIT1 | 66-67h 0000h 62 HTCTRL DC-DDh | 0020h 81 
NC_IOIO_BITMAPO | 68-6Bh 0000 0000h 62 HTCFG DE-DFh 0000h 82 
NC_IOIO_BITMAP71 | 6C-6Fh 0000 0000h 62 HTREV EOh 22h 83 
SM_RAM_CR 72h 02h 63 HTFREQ Eth 00h 84 
ESM_RAM_CR 73h 3Fh 64 HTFREQCAP E2-E3h 0005h 84 
TSEG_SIZE 74-75h 0002h 65 HTFEAT E4-E5h O0O00Ah 84 
HSEG_ BASE 76-77h FEEAh 66 HTFVCHG E6h 00h 90 
PM_CR2_ADDR 78-79h 0022h 66 LR_ATM E8h 01h 85 
PM_CR 7Ah 18h 67 LR_ATM80 E9h 00h 86 


SDRAM Memory Controller Registers (Dev 0, Fn 1-4) Summary 


Register Name Addr Default Value Pg Register Name Addr Default Value Pg 
SD_STS 4th 00h 88 MOD_ATTRIBS 65h SPD ROM value, 00h | 98 
SD_ERR 42h 00h 89 GEN_ATTRIBS 66h SPD ROM value, 00h _ | 98 
SPD_ADDR 43h 00h 89 MIN_CL_X-0.5 67h SPD ROM value, 00h _ | 99 
SPD_DATA 44-47h | 0000 0000h 89 MAX_CL_X-0.5 68h SPD ROM value, 00h _ | 99 
DIMM_SIZE 48-49h | SPD ROM value, 90 MIN_CL_X-1 69h SPD ROM value, 00h_ | 100 
0000h 
ROM_DATA_SIZE | 50h SPD ROM value, 00h _ | 90 MAX_CL_X-1 6Ah SPD ROM value, 00h_ | 100 
ROM_SIZE 51h SPD ROM value, 00h | 91 ROW_PRECHRG | 6Bh SPD ROM value, 00h | 101 
MEM_TYPE 52h SPD ROM value, 00h | 91 T_RRD 6Ch SPD ROM value, 00h | 101 
NUM_ROW_ADD | 53h SPD ROM value, 00h | 91 T_RCD 6Dh SPD ROM value, 00h _ | 101 
R 
NUM_COL_ADDR | 54h SPD ROM value, 00h | 92 T_RAS 6Eh SPD ROM value, 00h_ | 102 
NUM_PBANKS 55h SPD ROM value, 00h _ | 92 BANK_DENSITY 6Fh SPD ROM value, 00h_ | 102 
DATA_WIDTH 56-57h | SPD ROM value, 93 AC_SETUP 70h SPD ROM value, 00h_ | 102 
0000h 
VOLT_LEVEL 58h SPD ROM value, 93 AC_HOLD 71h SPD ROM value, 00h_ | 103 
0000h 
T_CYC 59h SPD ROM value, 00h _ | 93 D_SETUP 72h SPD ROM value, 00h_ | 103 
T_AC 5Ah SPD ROM value, 00h _ | 94 D_HOLD 73h SPD ROM value, 00h_ | 103 
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SDRAM Memory Controller Registers (Dev 0, Fn 1-4) Summary (Continued) 
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Register Name Addr Default Value Pg Register Name Addr Default Value Pg 
CFG_TYPE 5Bh SPD ROM value, 00h _ | 94 VCSDRAM 74-78h | SPD ROM value, 00h_ | 104 
REFRESH 5Ch SPD ROM value, 00h _ | 94 T_RC 79h SPD ROM value, 00h_ | 104 
DRAM_WIDTH 5Dh SPD ROM value, 00h | 95 T_RFC 7Ah SPD ROM value, 00h_ | 104 
ECC_WIDTH 5Eh SPD ROM value, 00h | 95 T_MAX_CK 7Bh SPD ROM value, 00h_ | 105 
BB_RND_COL 5Fh SPD ROM value, 00h _ | 96 T_MAX_DQSQ 7Ch SPD ROM value, 00h_ | 105 
BURSTLEN 60h SPD ROM value, 00h_ | 96 T_QHS 7Dh SPD ROM value, 00h | 105 
NUM_LBANKS 61h SPD ROM value, 00h _ | 96 SUPERSET 7E-8Dh | SPD ROM value, 00h_ | 106 
CAS_LAT 62h SPD ROM value, 00h _ | 97 SPD_REV 8Eh SPD ROM value, 00h_ | 106 
CS_LAT 63h SPD ROM value, 00h _ | 97 CKSUM 8Fh SPD ROM value, 00h_ | 106 
WE_LAT 64h SPD ROM value, 00h _ | 97 BSPAD[21:0] A8-FFh | 0000 0000h 107 
Virtual Temperature Sensor Configuration Registers (Dev 0, Fn 5) Summary 
Reg Name Addr Default Value Pg Reg Name Addr Default Value Pg 
VID 00-01h 1279h 108 T_OFFS 4th 00h 111 
DID 02-03h 1661h 108 T_STAT 42h 00h 111 
RID 08h 00h 108 T_CONF 43h 00h 111 
PI 09h 00h 109 T_CONV 44h 04h 112 
SUBC OAh 80h 109 T_HIGH 45h 7Fh 112 
BCC OBh 08h 109 T_LOW 46h C9h 113 
HEDT OEh 80h 109 T_AUTO 47h 64h 113 
SVID 2C-2Dh See description 110 T_CRIT 48h 7Fh (OEM-configurable) | 113 
SID 2E-2Fh See description 110 BSPAD[0:31] | 80-FFh 0000 0000h 114 
TEMP 40h Last calculated 110 
temperature 
AGP Host Bridge Configuration Registers (Dev 1, Fn 0) Summary 

Reg Name Addr Default Value Pg Reg Name Addr Default Value Pg 
VID1 00-01h 1279h 115 SBUSN 19h 00h 119 
DID1 02-03h 0061h 115 SUBUSN 1Ah 00h 119 
CMD1 04-05h 0000h 115 SMLT 1Bh 00h 119 
STS1 06-07h 0000h 116 IOBASE 1Ch FOh 120 
RID1 08h 00h 116 IOLIMIT 1Dh 00h 120 
PI1 09h 00h 117 SSTS 1E-1Fh 02A0h 120 
SUBC1 OAh 04h 117 MBASE 20-21h FFFOh 121 
BCC1 OBh 06h 117 MLIMIT 22-23h 0000h 121 
CLS1 0Ch 00h 117 PMBASE 24-25h FFFOh 121 
MLT1 ODh 00h 118 PMLIMIT 26-27h 0000h 122 
HDR1 OEh 01h 118 CAPPTR 34h 00h 122 
BIST1 OFh 00h 118 BCTRL 3Eh 80h 122 
PBUSN 18h 00h 118 
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CPUID Functions Initial State 


The following tables show default values for registers in the VNB. See the relevant sections for details. 


CPUID Standard Functions Summary 


CPUID Output CPUID Output 
Function Register | Initial Value Pg Function Register | Initial Value Pg 
0000 0000h EAX 0000 0001h or 125 0000 0002h EAX 0000 0000h 127 
0000 0003h 
EBX 756E 6547h EBX 0000 0000h 
ECX 3638 784Dh ECX 0000 0000h 
EDX 5465 6E69h EDX 0000 0000h 
0000 0001h EAX 0000 OF 24h 125 0000 0003h EAX 0000 0000h 127 
EBX 0001 100Eh EBX Processor serial 
ECX 0000 0000h ECX number 
EDX 2FCF FBFFh EDX 
CPUID Extended Functions Summary 
CPUID Output CPUID Output 
Function Register | Initial Value Pg Function Register | Initial Value Pg 
8000 0000h EAX 8000 0008h 128 8000 0005h EAX 0000 0000h 129 
EBX 6E61 7254h EBX O4FF O4FFh 
ECX 5550 436 1h ECX 4008 0120h 
EDX 7465 6D73h EDX 8004 0140h 
8000 0001h EAX 0000 OF 24h 128 8000 0006h EAX 0000 0000h 130 
EBX 0000 0000h EBX 0000 0000h 
ECX 0000 0000h ECX 0200 4180h, 
0400 4180h, or 
0800 4180h 
EDX 01C3 F3FFh EDX 0000 0000h 
8000 0002h EAX Transmeta 129 8000 0007h EAX 0000 0000h 131 
EBX Confidential/Proprietar EBX 0000 0000h 
y NDA Required\00h 
ECX ECX 0000 0000h 
EDX EDX 0000 0000h 
8000 0003h EAX 8000 0008h EAX 0000 2020h 131 
EBX EBX 0000 0000h 
ECX ECX 0000 0000h 
EDX EDX 0000 0000h 
8000 0004h EAX 
EBX 
ECX 
EDX 
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CPUID Output CPUID Output 
Function Register | Initial Value Pg Function Register | Initial Value Pg 
8086 0000h EAX 8086 0007h 132 8086 0004h EAX Transmeta-specific string | 134 
EBX 6E61 7254h EBX (continued) 
ECX 5550 4361h ECX 
EDX 7465 6D73h EDX 
8086 0001h EAX 0000 OF 24h 133 8086 0005h EAX 
EBX 0200 0000h EBX 
ECX Nominal core frequency ECX 
EDX TBD EDX 
8086 0002h EAX Processor revision 133 8086 0006h EAX 
EBX Code Morphing Software EBX 
ECX revision ECX 
EDX 0000 0000h EDX 
8086 0003h EAX Transmeta-specific string | 134 8086 0007h EAX Current core frequency 134 
EBX EBX Current core voltage 
ECX ECX LongRun performance % 
EDX EDX Current gate delay 
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Chapter 12 


BIOS: Examples 


TBD 
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Chapter 13 


BIOS: Programming 
Checklist 


TBD 
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Appendix A 


Recommended 


Reading 


The following documents should be used in conjunction with this guide. Due to the preliminary nature of this 
document, not all reference documents may be available. 


Efficeon™ Data Book 

Efficeon™ Code Morphing Software Guide 

Efficeon™ BIOS Programmer's Guide 

Efficeon™ Functional and Specification Errata 
Efficeon™ System Design Guide 

Astro TM8000 Code Morphing Software Release Notes 
TDM-2 User’s Guide 


Macraigor Raven User’s Guide 
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Glossary 


A ABI—Application Binary Interface. The detailed low-level conventions that applications use to communicate 
with an operating system or a language/environment library. An ABI is the low-level realization of an API. It 
consists of the register conventions, parameter passing and return conventions, invocation of the O/S 
conventions (e.g. through an exception, etc.), etc. 


ACPI—Advanced Configuration and Power Interface. An operating-system-centric power management 
scheme based on a description of a set of hardware interfaces that the operating system can use to both 
change the active and suspend power states of the CPU and to determine the relative advantages and 
implement an appropriate policy. BIOS sets up the ACPI tables, and the OS uses the tables to enter and exit 
states and decide when it is profitable to do it. 


AGP—Advanced Graphics Port. An interface added to modern northbridge chips used by graphics 
accelerators. It is similar to the PCI bus, but wider and running at a faster frequency. It is logically a PCI bus 
on its own right, but running at a higher frequency. 


API—Application Programming Interface. The high-level (often C-language) interface that applications use to 
communicate with an operating system or a language/environment library. By extension, the high-level 
interface presented by any subsystem (e.g. a telephony API). 


APIC—Advanced Programmable Interrupt Controller. An extension to the x86 architecture which allows finer 
granularity of control over interrupts and more interrupt sources without sharing an IRQ. The APIC 
architecture is composed of two components, the local APIC in each CPU, and the I/O APICs in the 
southbridge and elsewhere. The APICs communicate either by a dedicated protocol (dedicated bus in the P6 
class of Intel CPUs) to arbitrate interrupt delivery. 


atom—An individually-encoded operation in a VLIW instruction. A VLIW instruction, also called a molecule, 
consists of a collection of operations called atoms. Atoms are similar to the instructions in RISC architectures. 


B BlOS—Basic Input Output System. A collection of software utilities that virtualizes some of the platform for 
the benefit of the operating system. Typically it gains control after reset (power up), and after configuring 
some platform-specific hardware, loads the operating system into memory and transfer control to it. It remains 
resident as a set of subroutines to virtualize the keyboard, the mouse, the screen, the disk, etc. Modern 
operating systems bypass the BIOS for most services, and the BIOS has become almost exclusively a boot 
loader. 


bridge—A device connected to two or more buses that forwards requests or transactions from one to 
another. The northbridge, among oth er things, is a bridge logically connecting the processor local (or front- 
side) bus to the PCI (and AGP) bus. Some southbridges, among other things, are bridges connecting the PCI 
bus to an ISA bus. 
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Cc 


CMS—Code-Morphing™ Software. A dynamic translator and interpreter system that emulates some well- 
established architecture (e.g. x86) on top of Transmeta's unique VLIW hardware. 


CPU—Central Processing Unit. The processor in a computer system. It executes the SW instructions which 
advance state and may in turn access peripheral devices. Generally excludes memory and I/O devices, 
unless embedded in the CPU. 


CPX—Cycles Per X-tick. A measure of x86 machine efficiency/performance. At the same frequency and 
running the same application or benchmark, a lower CPX generally indicates better performance. 


DDR—Double Data Rate. A bus protocol technique in which data is transferred on both rising and falling 

edges of the bus clock, effectively achieving twice the data throughput. It is the counterpart to SDR on which 
data is transferred only on rising or falling edges of the clock. Examples of DDR interfaces are the TM8000 MI 
(memory interface) unit, and the HyperTransport link from the TM8000 Virtual Northbridge to the southbridge. 


DIMM—Dual In-line Memory Module. A memory (DRAM) module with a particular organization. 


DMA—Direct Memory Access. Traditionally, the ability of devices on a bus to access main memory without 
the processor's intervention—a form of doing I/O where the CPU is not directly involved in the transfers, 
unlike programmed I/O (PIO). In modern computer systems the DMA facility is implemented in the memory 
controller, called the northbridge in PC terminology. In Transmeta products, the processor is involved to 
maintain T-cache coherence. 


DRAM—Dynamic Random Access Memory. RAM implemented by capacitor circuits (single transistor cells, 
typically). Very dense, but requires frequent refreshing since the capacitors slowly discharge (leak), 
eventually losing their data contents. In addition, reads typically require rewriting because driving the output 
lines also discharges the capacitors. Refresh is sometimes implemented internally by parallel read/write. 


ECC—Error Correcting Code. A system in which data words (esp. memory) are extended with a few extra bits 
such that some number of bit errors can be detected and some (smaller) number of bit errors can be 
corrected. Typically done on 64-bit words with 1 bit error correction and 2 bit error detection because a simple 
scheme requires only 8 additional bits, thereby taking no more storage than byte-parity and enabling the use 
of the same memory DIMMs. 


EIP—Extended Instruction Pointer. The architectural 32-bit register in an x86 (a.k.a. [A-32) processor that 
holds the address of the currently executing instruction. The lower 16 bits are called the IP or ‘instruction 
pointer’. 


EISA—Extended Industry Standard Architecture. A 32-bit peripheral (I/O) bus defined by several companies 
in the PC industry as a counterpart to IBM's proprietary MCA bus. Never dominant, it was superseded by the 
PCI bus. 


FPR—Floating-Point Register. A register in the floating-point unit. It can contain floating-point data, integer 
data, or packed media data. It cannot be used to address memory directly. 


FPU—Floating-Point Unit. A part of a modern CPU that contains floating-point registers and implements 
floating-point and media operations. 


front-side bus—A bus connecting a CPU (or CPU core) to the memory controller/northbridge. Also called 
the processor local bus. It is typically CPU-core specific, and may be only conceptual when the northbridge is 
physically in the same chip as the CPU core, as in Transmeta products. 


GART—Graphics Address Relocation Table. A facility in modern AGP-enhanced northbridge chips used to 
give SW and the graphics accelerator the illusion that they are dealing with contiguous physical memory 
which is in fact sparsely allocated out of a page pool by the operating system without regard to contiguity. 
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GR—General Register Same as GPR. 


GPR—General Purpose Register. An integer register that can be used to contain integer data or memory 
addresses. As opposed to dedicated or special-purpose registers such as floating-point registers or special 
registers that control the memory subsystem, etc. 


H HT(1)—HyperTransport. See LDT. 


HT(2)—HyperTransport controller. The unit in the TM8000 Virtual Northbridge that implements the 
HyperTransport host bridge. 


HW—Hardware 


HyperTransport—A new name for LDT. 


I ICE—In-Circuit Emulator. A hardware device that allows very low-level debugging of a target system when 
controlled by software from a debugging host. It typically allows single stepping of system instructions and 
low level operations before and while the operating system and/or BIOS are running. 


VO, 1O—Input Output 


lOlO—1/O-port I/O. On the x86 architecture, I/O performed by using IO ports, i.e. in and out instructions to 
ports. These ports are not memory-mapped. They are an altogether different address space. 


IP(1)—Internet Protocol. A low-level network protocol that covers routing and delivery over large area 
networks. UDP and TCP are protocols built on top of IP, which is often built on top of Ethernet and other such 
protocols. 


IP(2)—Intellectual Property. Knowledge protected by trade secret, copyright, or patents. Sometimes used to 
describe some synthesizable logic (e.g. Verilog) that provides some modular functionality and that companies 
license to other companies for the use in their chips, e.g. an IDE controller. 


IRQ—Interrupt request line. Each interrupt request line results in a distinct interrupt vector to the CPU. 
Interrupt request lines can be uniquely assigned to devices or shared between devices. When unique, the 
interrupt handler can know exactly which device needs service. When shared, the interrupt handler must poll 
the devices that share the line to figure out which need service. 


ISA(1)—Instruction Set Architecture. The software-visible portion of a CPU's organization. It typically consists 
of the resources (e.g. registers), operations (e.g. instructions), and encodings of both that software needs to 
use to make use of the computer. On traditional CPU families, what is common between the members of the 
family and allows SW to run across the family. 


ISA(2)—Industry Standard Architecture. The 16-data-bit, 24-address-bit memory and peripheral (I/O) bus for 
the IBM PC-AT—the first with an Intel 286 processor. Until recently, all PCs had one. The trend these days, 
especially in laptops, but even on desktops, is to abandon it after moving all legacy devices to the 
southbridge. 


L L1—Level-1. First level of the cache hierarchy. On the TM8000 there is an L1 data cache and an L1 
instruction cache. 


L2—Level-2. Second level of the cache hierarchy. On the TM8000 there is a combined data and instruction 
L2 cache. 


LDT—Lightning Data Transport. A peripheral interconnect fabric designed by AMD to replace the PCI bus 
and possibly others (AGP). Logically it is very similar to PCI. Physically it is not a bus at all, but instead a 
point-to-point connection. LDT devices can be daisy chained and additional chains can be split from the 
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primary chain. It is the TM8000’s primary external interface. During 2001, LDT has been renamed 
‘HyperTransport’. 


LongRun—A Transmeta technology that allows the x86 processor to change operating clock frequency and 
supply voltage on the fly to consume as little power as possible while satisfying the computational needs of 
the running OS and applications. It is implemented by a combination of HW (SW-controlled frequency and 
voltage) and SW (mechanisms and policies for frequency and voltage ramping). 


LongRun Advanced Thermal Management—A Transmeta technology 


I-value—Left value. A compiler term describing a location written by an assignment statement. Opposed to r- 
value which is a value that can be stored into such a location. Thus an assignment consists of an I-value and 
an r-value. 


MCA(1)—Machine Check Architecture. An x86 extension that allows diagnostic software to inspect the state 
of some internal processor registers when an MCE is raised. It is processor-specific. 


MCA(2)—Micro-Channel Architecture. A 32-bit peripheral (I/O) bus defined by IBM to supersede the ISA bus 
in the PS2 PC architecture. It was proprietary, and hence other companies came up with a different standard, 
EISA, that ultimately proved more popular. The fiasco over MCA marked the end of IBM's dominance of the 
PC system architecture. 


MCE—Machine Check Exception. An x86 exception raised by an x86 processor when it encounters some 
irrecoverable internal condition. It indicates a failure in the processor, not the running program at the time the 
fault is raised. 


MI—Memory Interface. The unit in the Virtual Northbridge that controls and communicates with the DRAM 
DIMMs. It supports only DDR DIMMs. 


MMIO—Memory-mapped I/O. Input/output to devices by using accesses to the regular "memory" address 
space. Device control registers and buffers are mapped into the "memory" address space and respond to 
ordinary reads and writes on the bus by effecting the appropriate action. 


MMX—Multi Media eXtensions. SIMD integer extensions to the x86 architecture. 


molecule —A VLIW instruction encoding multiple operations that logically occur simultaneously. Each 
individual operation is called an atom. 


MTRR—Memory Type Range Register. An x86 architectural extension by which the memory attributes of an 
access (cacheability) can be described at the physical level -- the address space can be divided into multiple 
regions with different cacheability properties for reads and writes. It was introduced by Intel to handle several 
problems in earlier systems where the cacheability of an access was known to the northbridge (PAB bits) but 
not the processor. It is in effect a processor-local "copy" of the PAB bits and memory top register. 


NaN—Not A Number. An IEEE 754 format floating-point "value" that does not have a numeric value. They 
are computed as the masked response to invalid operations (e.g. divide 0 by 0), and also sometimes used for 
uninitialized memory. They come in two flavors. Signalling NaNs (SNaN) raise the invalid numeric exception 
unconditionally. Quiet NaNs (QNaN) only raise it in certain circumstances. Typical masked response is to 
produce quiet NaNs that will propagate through the computation contaminating the result (only comparisons 
can eliminate NaNs -- arithmetic produces NaN outputs when given any NaN inputs). 


Natural Alignment—A power-of-two-sized memory operand is naturally aligned if the address of the 
operand is an integer multiple of the size of the operand. For example a 1-byte-sized operand is always 
naturally aligned. An 8-byte-sized operand is naturally aligned only at addresses that are multiples of 8, etc. 


NC—Non-cached or Non-cacheable. A memory (load/store) operation that does not go through the cache 
subsystem. It may be an operation to an IO port (l1OIO), memory mapped IO (MMIO), or a memory-bound 
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operation that CMS has decided must follow the NC path in order to guarantee cache coherence in the 
system as a whole or for performance reasons. 


NMI—Non-Maskable Interrupt. An interrupt that cannot be blocked by software. The x86 NMI is only blocked 
by the execution of the SMI handler. Transmeta HW allows blocking x86 NMI, but CMS makes it appear that 
it is not blocked except in this circumstance. 


normal memory—An x86 address space region where reads and writes (or x86 instruction fetches) can be 
optimized and reordered because it corresponds to cacheable DRAM on the memory controller in the 
northbridge. 


Northbridge—A part of a PC's chip set that implements the memory controller, the DMA engine, and the PCI 
bus master. Modern ones also implement AGP. It is connected to the CPU via a non-standard local (or front- 
side) bus, and is connected to the southbridge via the PCI bus and a few additional signals. 


O OOL(1)—Out-Of-Line subroutine. A subroutine in CMS that implements the functionality of some complex 
x86 instruction. Rather than inlining the code in translations and the interpreter, these out of line handlers are 
used instead. The OOL doesn't have to implement the complete instruction -- part of it (e.g. loading from the 
stack) can be done in line. 


OOL(2)—Object Oriented Language. Sometimes used abbreviation for a high-level computer language 
whose principal data items are organized as objects with lifetimes and properties independent of the 
programs that manipulate them. Often used for languages with message-based invocation semantics and 
modularity and encapsulation organized around data instead of code. 


OS—Operating System. The main control program of a computer system. It typically multiplexes the 
computer's resources (including execution time) among competing application programs and provides 
several services to them such as uniform I/O APIs that abstract the details of the individual devices in use. 


P PAB—Programmable Attribute Bits. The set of bits in a traditional northbridge that control the access to the 
legacy region (640K - 1M), especially in regards to ROM shadowing. The PAB bits allow reads and writes to 
independently be routed to memory or the PCI bus. 


PAE—Physical Address Extension. An extension to the x86 architecture by which physical addresses can be 
36-bits wide, instead of the usual 32-bits wide. Each PTE/PDE becomes 8 bytes long instead of the usual 4 
bytes long, the page tables are 3 levels deep instead of the usual 2 levels, and the large pages (as in PSE) 
are 2MB instead of 4MB. 


PAT—Physical Attribute Table. An x86 architectural extension by which the memory attributes of an access 
(cacheability) can be described at a virtual level instead of physical level. Each virtual to physical mapping 
has a memory type index in the relevant PTE that indexes the PAT to produce a memory type that is then 
combined with the type from the MTRRs to produce the actual memory type for the access. 


PC(1)—Personal Computer. A computer intended to be used by a single person, i.e. traditionally running a 
single-user operating system. More commonly, an x86-compatible computer, i.e. what used to be called an 
IBM-compatible computer, irrelevant of whether the operating system running on it makes it multi-user or not. 


PC(2)—Program Counter. The conceptual register in a processor that holds the address of executing 
instructions. In pipelined processors there may not be such a register -- each pipeline stage may have its 
own copy. PCs are usually not visible as registers -- they are reified on interrupts/exceptions, and reflected 
on resume from exception/interrupt return. In the x86 architecture, the PC is called EIP. 


PCl—Peripheral Component Interconnect. The peripheral (l/O) bus of a modern PC. It is a 32-bit bus with 
multiple address spaces: The I/O port (IOIO) address space, the ordinary memory-mapped (MMIO) address 
space, and the configuration address space. It was first introduced in the PC architecture by Intel with the 
Pentium processor, to rationalize and standardize the multiple peripheral buses then extant (VESA local bus, 
EISA, MCA, ISA). Although memory-like devices can be added to the bus, this is unusual, and memory is 
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typically elsewhere on a system. The system's northbridge typically connects to both memory and the PCI 
bus, but the memory is not on the PCI bus, although accessible from it by using DMA. 


PDE—Page Directory Entry. A data structure in the page tables that aggregates a collection of virtual to 
physical mappings. It does not describe any virtual to physical mapping itself, but allows the page table 
walker to find the individual mappings. In the usual two-level x86 page table structure, the PDEs are the level 
between the root and the PTEs. 


PGE—Page Global Extension. An extension to the x86 architecture by which specially-marked ‘global’ virtual 
to physical mappings survive TLB invalidations and can only be invalidated explicitly. 


PIC—Programmable Interrupt Controller. Traditionally, a device on a PC's motherboard that multiplexed 
interrupts to the CPU. These days the PIC is implemented as part of modern southbridges, and not as 
separate components. 


PIO—Programmed I/O (input/output). A way of doing I/O where the CPU actively executes instructions to 
perform the actual transfer of data, as opposed to DMA, where the CPU is passive: the transfer of data is 
done by an asynchronous device without any CPU instructions needed except to set up the transfer. 


PSE—Page Size Extensions. An extension to the x86 architecture by which virtual pages can be either 4MB 
(large pages) or the usual 4KB. Virtual to physical mappings for large pages take the place of PDEs in the 
page tables. 


PSE-36—Page Size Extensions - 36 bits. An extension to the x86 architecture that combines features of PSE 
and PAE. The PTEs and PDEs remain as in the normal 2-level page tables, but the 4MB pages can be 
mapped to a full 36-bit address space, instead of the usual 4KB address space. 


PTE—Page Table Entry. A data structure in the page tables that describes the virtual to physical mapping for 
a single virtual page. In the usual multi-level x86 page table structure, the PTEs are the level farthest from 
the root. 


QNaN—Quiet NaN. See NaN. 


RAM—Random Access Memory. The main memory of a computer system, addressable in no particular 
order. 


ROM—Read-Only Memory. A memory-like device that can only be read and not written. Most modern ROMs 
are not really ROMs at all, but Flash ROMs or EEPROMs. EEPROMs are electrically-erasable 
programmable read-only memories, i.e. memory-like devices that are easy to read and difficult -- but possible 
-- to write. Flash ROMs are similar to EEPROMs that cannot be erased at the individual byte or word level but 
can be erased in units of moderate to large sectors. These EEPROMs and Flash ROMs are treated largely 
like true ROMs, except when their contents are upgraded, which is a very infrequent operation. Programming 
them (i.e. writing to them), is usually called "flashing", perhaps because early EPROMS (erasable 
programmable read-only memories) could only be erased by exposing them to ultra violet light. 


r-value—Right value. See I-value. 


SDR—Single Data Rate. A bus protocol technique in which data is transferred once per clock cycle, typically 
on rising edges of the clock. It is the counterpart to DDR in which data is trasferred twice per cycle. 


serialization —The property that prevents two operations from being either reordered or carried out 
simultaneously. There are many forms of serialization in the x86 architecture, including but not restricted to 
code serialization and data serialization. 


serializing instruction—An instruction that has some serialization property with respect to other instructions. 
x86 serializing instructions can be strong or weak. 
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SIMD—Single Instruction Multiple Data. A form of obtaining parallelism that consists on having single 
instructions operate on multiple data items simultaneously. The operations are usually uniform. The Intel 
variants of this, called MMX, SSE, and SSE2 divide large (64-bit or 128-bit) registers into multiple same-sized 
fields, and the operations operate on all the fields independently. 


SMC—Self-Modifying Code. Code that either modifies its own instructions (the proper usage), or has its 
instructions modified by other pieces of code (the general usage). Particular common patterns are Bit-blit 
generators, which frequently generate code on the fly in a common buffer, dynamic compilers (such as CMS 
itself), and runtime patching of immediates. 


SMI—System Management Interrupt. A special interrupt in an x86 CPU that causes the CPU to enter SMM. 


SMM—System Management Mode. An extension to the x86 architecture that allows BIOSs to control 
peripheral devices without OS awareness. Often used to implement power-management functions such as 
powering off and restarting disks without the OS being aware. SMM has access to regions of memory 
(SMRAM) that the regular OS cannot address. SMM is the state of the processor when servicing an SMI. 


SMP—Simultaneous Multi-Processor. A multi-CPU computer system (a multicomputer) where the CPUs 
logically share memory so that ordinary accesses from one CPU are visible from other CPUs without 
additional software support. The rules for serialization and ordering of memory references and visibility 
among the multiple CPUs can vary a lot. The memory may be either uniformly accessible or non-uniformly 
accessible, where logically there is no difference, but there is a large performance difference depending on 
the locality of the memory being accessed. 


SMRAM—System Management RAM. An alternate address space, or extension of the regular x86 physical 
address space, used in SMM. 


SNaN—Signalling NaN. See NaN. 


Southbridge—A part of a PC's chip set that implements several sundry functions: bridge between the PCI 
and ISA buses, power-control of the platform, IDE bus controllers, serial, parallel, mouse, and keyboard ports, 
USB controllers, audio devices, ROM control, etc. Connected to the Northbridge via a PCI or LDT interface 
and to both the northbridge and the CPU through additional signals. 


SRAM—Static Random Access Memory. RAM implemented out of storage cells that do not decay if 
unattended. Much less dense than DRAM, but typically much faster and not requiring refresh. Common 
modern designs are made out of 6 or 4 transistor cells (6T or 4T). 


SSE—Streaming SIMD Extensions. SIMD floating-point extensions to the x86 architecture. There are two 
levels: SSE proper which introduced SIMD 32-bit (single precision) floating-point operations, and SSE2 which 
introduced SIMD 64-bit (double precision) floating-point operations. The extensions also include integer and 
MMX operations on the new XMM registers. 


SSM—State Save Map. Data structure in SMRAM where an x86 CPU saves its state on entry to SMM and 
from where it restores it on exit from SMM. 


sticky bit—A bit in a register is said to be sticky when it records a condition in a monotonic way. That is, 
when the condition arises, it changes state, and does not change back even if the condition disappears. It is 
only changed back by explicit software intervention. 


STPCLK—Stop Clock. A (logical) signal in a PC system originating in the southbridge and used to stop the 
CPU at an appropriate point. Such stop can be a prelude to power down, or a temporary stop due to power 
management events. STPCLKs can be expected, when the CPU initiates a power management transition or 
shutdown, or unexpected, when the southbridge initiates clock throttling often caused by overheating. 


STPGRNT—Stop Grant. A (logical) signal in a PC system originating in a CPU and used to inform the 
southbridge that a preceding STPCLK has been honored. Typically the STPGRNT must follow quickly after 
the STPCLK because southbridges are intolerant of many intervening transactions. 


TRANSME TA ‘o Transmeta Proprietary Information Provided Under Nondisclosure Agreement 187 


Glossary 


PRELIMINARY INFORMATION Efficeon™ Development Tools 
SUBJECT TO CHANGE August 19, 2003 


strapping options—Hardware interface pins whose logic value is sampled at reset time by hardware in 
order to choose an option among initial configuration possibilities. Examples of such strapping options are 
processor number for SMP systems, device ID selection addresses for identical devices on a bus, etc. 


strongly-serializing instruction—A serializing instruction that constitutes an absolute barrier to previous 
and following instructions or memory operations. All previous instructions are guaranteed to have completed 
by the time that the strongly serializing instruction executes, and all following instructions are guaranteed not 
to have started until after the strongly serializing instruction completes. Strongly serializing instructions cause 
write combiners to be drained. 


SW—Software 


TBD—To Be Determined. Something not yet fully understood or specified. 


thread—A control-flow and register state within an address space. Several threads can execute within a 
single process. Each thread typically has its own logical register set and stack but shares the address space 
and O/S resources with other threads in the same process. Sometimes threads also have thread-local data. 
Win32 threads and POSIX threads are the most common thread APIs. 


TLB—Translation Look-aside Buffer. A hardware (and sometimes software) structure used to accelerate 
memory references in a paged environment. It is a cache of mappings from virtual addresses to physical 
addresses and some attributes of the mappings used to avoid walking the page tables on every access. 
These virtual to physical mappings are called translations, but are not to be confused with the instruction 
translations that CMS produces. 


trip count—The number of iterations that a loop executes when entered from outside. Integer loops often 
have very low trip counts, in the vicinity of 3. Floating-point and media loops often have very high trip counts 
(hundreds of thousands or millions). Many loop optimizations are only worthwhile if the typical trip count is 
moderately high. 


ULP—Unit of Least Precision. The least significant bit position in a floating-point number. Often used to 
describe the accuracy of the implementation of some floating-point function (e.g. transcendentals). If the 
accuracy is within 1/2 ULP, the answer is exact. If within 1 ULP, then a result is off by at most the quantity 
that a bit in the least significant position of the mantissa would represent, and so on. 


UMA—Unified Memory Architecture. A system setup where all graphics memory (frame buffer and off frame 
storage for display lists, textures, etc.) lives in system memory -- directly accessible by the CPU, rather than 
in dedicated memory that the CPU cannot directly access. In other contexts, the acronym stands for ‘uniform 
memory architecture’, as opposed to 'non uniform memory architecture’. 


USB—Universal Serial Bus. A bus in modern PCs that is distinguished by using a serial protocol over a small 
number of wires. Several devices that used to be connected through dedicated interfaces are now connected 
to the computer through this bus. 


VICE—Virtual In-Circuit Emulator. A software component of Code Morphing software, coupled with a 
software program running on a debugging host that together emulate a true x86 ICE. 


Visible interrupts—Interrupts that are not invisible interrupts. 


VLIW—Very Long Instruction Word. A style of ISA characterized for large (in bits) instructions that group 
several independent operations that are executed in parallel and atomically. 


VNB—Virtual North Bridge. A software component of CMS that logically emulates the registers and 
operations of a physical northbridge chip, mapping them to whatever hardware the Transmeta product 
implements directly. 
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VSB—Virtual South Bridge. A software component of CMS that logically emulates the registers and 
operations of a physical southbridge chip, mapping them to whatever hardware the Transmeta product 
implements directly. 


Ww weakly-serializing instruction —A serializing instruction that has some reordering properties with respect to 
some other instructions but not all. Thus some instructions are serialized with respect to a weakly serializing 
instruction, but not all instructions are. 


X x86—Of or compatible with 80x86 processors manufactured by Intel. Common x86 platforms include Intel’s 
Pentium processors, AMD Athlon processors, and Transmeta processors. 


X-bus —A derivative of the 8088's original bus. The 8088 was a variant of the 8086 (first processor in the 
x86 architecture line from Intel) with only an 8-bit-wide data bus (20-bit addresses). It is still often found 
hanging off the southbridge in a PC system to connect to the flash ROM containing the BIOS, and a few very 
simple devices such as the keyboard controller. 
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NUM_LBANKS—SPD ROM Logical Banks on SDRAM 
Register 102 
NUM_PBANKS—SPD ROM Physical Banks on DIMM Module 
Register 98 


NUM_ROW_ADDR—SPD ROM Number of Row Addresses 
Register 97 
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REFRESH—SPD ROM Refresh Rate/Type Register 100 
ROM_DATA_SIZE—SPD ROM Data Size Register 96 
ROM_SIZE—SPD ROM Total Size of ROM Register 97 


ROW_PRECHRG—SPD ROM Minimum Row Precharge Time 
Register 107 


SD_ERR—SDRAM DIMM Slot Error Register 94 
SD_STS—SDRAM DIMM Slot Status Register 93 
SPD_ADDR—SPD ROM Address Register 94 
SPD_DATA—SPD ROM Data Register 94 


SPD_REV—SPD ROM DIMM SPD ROM Revision 
Register 112 


SUPERSET—SPD ROM Reserved for Superset Info 
Register 112 


T_AC—SPD ROM SDRAM Access from Clock Time 
Register 100 


T_CYC—SPD ROM SDRAM Cycle Time Register 99 
T_MAX_CK—SPD ROM Max Cycle Time Register 111 


T_MAX_DQSQ—SPD ROM Max DQS-DQ Skew Time 
Register 111 


T_QHS—SPD ROM Max Read Data Hold Skew Time 
Register 111 


T_RAS—SPD ROM Min Active to Precharge Time 
Register 108 


T_RCD—SPD ROM Min RAS to CAS Delay Register 107 


T_RC—SPD ROM Min Active to Auto-Refresh Time 
Register 110 


T_RFC—SPD ROM Min Auto-Refresh to Cmd Time 
Register 110 


T_RRD—SPD ROM Min Row to Row Active Delay 
Register 107 


VCSDRAM—SPD ROM Reserved for VCSDRAM 
Register 110 


ViID—Vendor Identification Register 95, 96, 113 


VOLT_LEVEL—SPD ROM DIMM Voltage Interface Level 
Register 99 


WE_LAT—SPD ROM Write Enable Latency Register 103 
SEP_ESP—SYSENTER ESP MSR 139 
SEP_SEL—SYSENTER/SYSEXIT Base Selector MSR 139 
Serial Presence Detect (SPD) 38 
SID—Subsystem Identification Register (HT) 58 
SM_RAM_CR—System Management RAM Control Register 

(HT) 66 
SMAF support 45 
SMAFD—STPCLK System Management Action Field Definition 
Register (HT) 71 
SMI interrupt 156 
SMLT—Secondary Master Latency Timer Register (AGP) 118 
SMM 

A20 masking 22 

memory range 26 
SMRAM regions, cacheability 35 
SPD (Serial Presence Detect) 38 
SPD ROM 

Address and Cmd Hold Time Register, see AC_HOLD 109 

Address and Cmd Setup Time Register, see AC_SETUP 108 


Back-to-Back Random Col Access Register, see 
BB_RND_COL 102 


CAS Latency Register, see CAS_LAT 103 
Checksum Register, see CKSUM 112 

CS Latency Register, see CS_LAT 103 

Data Hold Time Register, see D. HOLD 109 
Data Setup Time Register, see D_SETUP 109 


Data Size Register, see ROM_DATA_SIZE 96 

DIMM Configuration Type Register, see CFG_TYPE 100 
DIMM Data Width Register, see DATA_WIDTH 99 

DIMM SPD ROM Revision Register, see SPD_REV 112 
DIMM Voltage Interface Level Register, see VOLT_LEVEL 99 
ECC SDRAM Width Register, see ECC_WIDTH 101 

General Attributes Register, see GEN_ATTRIBS 104 

Logical Banks on SDRAM Register, see NUM_LBANKS 102 
Max Cycle Time Register, see T_MAX 111 


Max Data Access Time at X-0.5 Register, see MAX_CL_X- 
0.5 105, 106 


Max Data Access Time at X-1 Register, see MAX_CL_X- 
1 106 


Max Read Data Hold Skew Time Register, see T QHS 111 
Min Active to Auto-Refresh Time Register, see TRC 110 
Min Active to Precharge Time Register, see T_.RAS 108 
Min Auto-Refresh to Cmd Time Register, see T.RFC 110 
Min CLK Latency X-0.5 Register, see MIN_CL_X-0.5 105 
Min CLK Latency X-1 Register, see MIN_CL_X-1 106 

Min RAS to CAS Delay Register, see T RCD 107 

Min Row to Row Active Delay Register, see T RRD 107 


Minimum Row Precharge Time Register, see 
ROW_PRECHRG 107 


Module Attributes Register, see MOD_ATTRIBS 104 
Module Bank Density Register, see BANK_DENSITY 108 


Number of Column Addresses Register, see 
NUM_COL_ADDR 98 


Number of Row Addresses Register, see 
NUM_ROW_ADDR 97 


Physical Banks on DIMM Module Register, see 
NUM_PBANKS 98 


Primary SDRAM Width Register, see DRAM_WIDTH 101 
Refresh Rate/Type Register, see REFRESH 100 
Reserved for Superset Info Register, see SUPERSET 112 
Reserved for VCSDRAM Register, see VCSDRAM 110 
SDRAM Access from Clock Time Register, see TAC 100 
SDRAM Burst Lengths Register, see BURSTLEN 102 
SDRAM Cycle Time Register, see T_CYC 99 
SDRAM Memory Type Register, see MEM_TYPE 97 
Total Size of ROM Register, see ROM_SIZE 97 
Write Enable Latency Register, see WE_LAT 103 
SPD_ADDR—SPD ROM 
Address Register (SDRAM) 94 
SPD_DATA—SPD ROM 
Data Register (SDRAM) 94 


SPD_REV—SPD ROM DIMM SPD ROM Revision Register 
(SDRAM) 112 


SSTS—Secondary PCI-to-PCl Status Register (AGP) 119 
STS1—Status Register (AGP) 115 

STS—Status Register (HT) 54 

SUBC1—Sub-Class Code Register (AGP) 116 
SUBC—Sub-Class Code Register (HT) 55 
SUBUSN—Subordinate Bus Number Register (AGP) 118 


SUPERSET—SPD ROM Reserved for Superset Info Register 
(SDRAM) 112 


SVviD—Subsystem Vendor Identification Register (HT) 58 
SYSENTER_EIP—SYSENTER EIP MSR 140 
system address map 19 
system block diagram 13 
System Management Mode (SMM) 155 
address space 159 
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address space caching 156 
auto-halt restart on exit 158 
auto-halt restarton resume 157 
entry state 156 
environment 155 
execution cycle 155 
exit considerations 158 
external interrupts 156 
fields 164 
auto-halt restart field 166 
I/O instruction restart field 165 
SMBASE register 165 
SMM revision ID field 165 
Transmeta-specific field 164 
\/O instruction restart 158 
I/O instruction restart on exit 159 
initial processor state after SMI 156 
initialization 161 
resume features 157 
SMBASE relocation on exit 158 
SMBASE relocation on resume 157 
SMI 156 
SMRAM region decode 160 
state change 161 
state save map layout 162 
state save prior to power off 155 


T 


T_AC—SPD ROM SDRAM Access from Clock Time Register 
(SDRAM) 100 


T_CYC—SPD ROM SDRAM Cycle Time Register (SDRAM) 99 


T_MAX_CK—SPD ROM Max Cycle Time Register 
(SDRAM) 111 


T_QHS—SPD ROM Max Read Data Hold Skew Time Register 
(SDRAM) 111 


T_RAS—SPD ROM Min Active to Precharge Time Register 
(SDRAM) 108 


T_RCD—SPD ROM Min RAS to CAS Delay Register 
(SDRAM) 107 


T_RC—SPD ROM Min Active to Auto-Refresh Time Register 
(SDRAM) 110 


T_RFC—SPD ROM Min Auto-Refresh to Cmd Time Register 
(SDRAM) 110 


T_RRD—SPD ROM Min Row to Row Active Delay Register 
(SDRAM) 107 

THERM_CONTROL—Thermal Control MSR 141 

THERM_INTERRUPT—Thermal Interrupt MSR 141 

THERM_STATUS—Thermal Status MSR 141 

thermal management 46 

TOM—Top of Memory Register (HT) 59 

Transmeta-specific MSRs 148 

TSC (Time Stamp Counter) enable 126 

TSC—Timestamp Counter MSR 137 

TSEG_SIZE—TSEG Size Register (HT) 68 


U 
UP_ROM_SZ—Upper ROM Size Register (HT) 76 


V 


VCSDRAM—SPD ROM Reserved for VCSDRAM Register 
(SDRAM) 110 


ViID1—Vendor Identification Register (AGP) 114 

VID—Vendor Identification Register (SDRAM) 95, 96, 113 

VID—Vendor Identification Register(HT) 53 

VNB (Virtual Northbridge) 47 

AGP bridge configuration registers 113 

BCC1—Base Class Code Register 116 
BCTRL—PCI-to-PCI Bridge Control Register 121 
BIST1—Built-In Self Test Register 117 
CAPPTR—Capabilities Pointer Register 121 
CLS1—Cache Line Size Register 116 
CMD1—Command Register 114 
DID1—Device Identification Register 114 
HDR1—Header Type Register 117 
IOBASE—I/O Base Address Register 119 
IOLIMIT—I/O Limit Address Register 119 
MBASE—Memory Base Address Register 120 
MLIMIT—Memory Limit Address Register 120 
MLT1—Master Latency Timer Register 117 
PBUSN—Primary Bus Number Register 117 
Pl1—Programming Interface Register 116 


PMBASE—Prefetchable Memory Base Address 
Register 120 


PMLIMIT—Prefetchable Memory Limit Address 
Register 121 


RID1—Revision Identification Register 115 

SBUSN—Secondary Bus Number Register 118 

SMLT—Secondary Master Latency Timer Register 118 

SSTS—Secondary PCI-to-PCl Status Register 119 

STS1—Status Register 115 

SUBC1—Sub-Class Code Register 116 

SUBUSN—Subordinate Bus Number Register 118 

ViID1—Vendor Identification Register 114 

HT bridge registers 51 

AGPCAPID—AGP Capability Identifier Register 78 

AGPCMD—AGP Command Register 79 

AGPCTRL—AGP Control Register 81 

AGPNEXTCAP—AGP Next Capability Pointer Register 78 

AGPSTAT—AGP Status Register 79 

AGPVER—AGP Version Register 78 

APBASE—Aperture Base Address Register 57 

APS|IZE—Aperture Size Register 81 

ATTPAGE—Aperture Translation Table Page Register 82 

BCC—Base Class Code Register 56 

BIST—Built-In Self Test Register 57 

BSPAD—BIOS Scratch Pad Registers 84 

CAPPTR—Capabilities Pointer Register 58 

CLS—Cache Line Size Register 56 

CMD—Command Register 54 

CMSMAX—Code Morphing™ Software Maximum Memory 
Register 60 

CMSMEM—Code Morphing™ Software Memory Size 
Register 60 

CMSMIN—Code Morphing™ Software Minimum Size 
Register 59 

DID—Device Identification Register 53 

ERRCMD—Error Command Register 73 
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ERRSTS—Error Status Register 75 


ESM_RAM_CR—Extended SMM RAM Control Register 67 


HDR—Header Type Register 56 

HSEG_BASE—HSEG Base Register 69 

HTCAP—HT Capability Identifier Register 84 

HTCFG—HT Link Configuration Register 87 

HTCMD—HT Command Register 85 

HTCTRL—HT Link Control Register 86 

HTFEAT—HT Feature Capability Register 89, 90 

HTFREQCAP—HT Frequency Capabilities Register 89 

HTFREQ—HT Frequency Register 88 

HTNEXTCAP—HT Next Capability Identifier Register 85 

HTREV—HT Revision ID Register 88 

LOW_ROM_SZ—Lower ROM Size Register 76 

LR_ATM—LongRun™ Advanced Thermal Management 
Register 90, 91 

MBE_ADDR—Multi-Bit ECC Error Address Register 73 

MLT—Master Latency Timer Register 56 

NBCFG—NB Configuration Register 60 

NC_lOIO_BITMAPO—Noncompat IO Bitmap 0 Register 65 

NC_IOIO_BITMAP1—Noncompat IO Bitmap 1 Register 66 


NC_LEGACY—Legacy Region Noncompat Control 
Register 62 


NC_MMIO_BASE0—Noncompat Memory Mapped IO Base 
0 Register 64 


NC_MMIO_BASE1—Noncompat Memory Mapped IO Base 
1 Register 64 


NC_MMIO_LIMITO—Noncompat Memory Mapped IO Limit 
0 Register 64 


NC_MMIO_LIMIT1—Noncompat Memory Mapped IO Limit 
1 Register 65 


OEMOPT—OEM Option Data Registers 83 
PAB—Programmable Memory Attribute Registers 63 
Pl—Programming Interface Register 55 


PM_CR2_ADDR—ACPI Power Management Control 
Address Register 69 


PM_CR2_OPT—ACPI Power Management Control Options 
Register 70 


PM_CR—ACPI Power Management Control Register 70 
RID—Revision Identification Register 55 
ROM_FRBDN—Forbidden ROM Size Register 77 
ROM_PRTCTD—Protected ROM Size Register 77 
SBE_ADDR—Single-Bit ECC Error Address Register 72 
SID—Subsystem Identification Register 58 
SM_RAM_CR—System Management RAM Control 
Register 66 
SMAFD—STPCLK System Management Action Field 
Definition Register 71 


STS—Status Register 54 

SUBC—Sub-Class Code Register 55 
SVID—Subsystem Vendor Identification Register 58 
TOM—Top of Memory Register 59 
TSEG_SIZE—TSEG Size Register 68 
UP_ROM_SZ—Upper ROM Size Register 76 
VID—Vendor Identification Register 53 


I/O mapped registers 48 


CONFADDR—Configuration Address Register 49 
CONFDATA—Configuration Data Register 50 
PM_CR2—ACPI Power Management Control Register 48 


PCI configuration registers 50 
register classifications 47 


SDRAM memory controller registers 91 


AC_HOLD—SPD ROM Address and Cmd Hold Time 
Register 109 


AC_SETUP—SPD ROM Address and Cmd Setup Time 
Register 108 


BANK_DENSITY—SPD ROM Module Bank Density 
Register 108 


BB_RND_COL—SPD ROM Back-to-Back Random Col 
Access Register 102 


BURSTLEN—SPD ROM SDRAM Burst Lengths 
Register 102 


CAS_LAT—SPD ROM CAS Latency Register 103 


CFG_TYPE—SPD ROM DIMM Configuration Type 
Register 100 


CKSUM—SPD ROM Checksum Register 112 

CS_LAT—SPD ROM CS Latency Register 103 

D_HOLD—SPD ROM Data Hold Time Register 109 

D_SETUP—SPD ROM Data Setup Time Register 109 

DATA_WIDTH—SPD ROM DIMM Module Data Width 
Register 99 

DIMM_SIZE—DIMM Module Size Register 95 


DRAM_WIDTH—SPD ROM Primary SDRAM Width 
Register 101 


ECC_WIDTH—SPD ROM ECC SDRAM Width 
Register 101 


GEN_ATTRIBS—SPD ROM General Attributes 
Register 104 


MAX_CL_X-0.5—SPD ROM Max Data Access Time at X- 
0.5 Register 105, 106 


MAX_CL_X-1—SPD ROM Max Data Access Time at X-1 
Register 106 


MEM_TYPE—SPD ROM SDRAM Memory Type 
Register 97 


MIN_CL_X-0.5—SPD ROM Min CLK Latency X-0.5 
Register 105 


MIN_CL_X-1—SPD ROM Min CLK Latency X-1 
Register 106 


MOD_ATTRIBS—SPD ROM Module Attributes 
Register 104 


NUM_COL_ADDR—SPD ROM Number of Column 
Addresses Register 98 


NUM_LBANKS—SPD ROM Logical Banks on SDRAM 
Register 102 


NUM_PBANKS—SPD ROM Physical Banks on DIMM 
Module Register 98 


NUM_ROW_ADDR—SPD ROM Number of Row Addresses 
Register 97 


REFRESH—SPD ROM Refresh Rate/Type Register 100 
ROM_DATA_SIZE—SPD ROM Data Size Register 96 
ROM_SIZE—SPD ROM Total Size of ROM Register 97 


ROW_PRECHRG—SPD ROM Minimum Row Precharge 
Time Register 107 


SD_ERR—SDRAM DIMM Slot Error Register 94 
SD_STS—SDRAM DIMM Slot Status Register 93 
SPD_ADDR—SPD ROM Address Register 94 
SPD_DATA—SPD ROM Data Register 94 


SPD_REV—SPD ROM DIMM SPD ROM Revision 
Register 112 


SUPERSET—SPD ROM Reserved for Superset Info 
Register 112 


T_AC—SPD ROM SDRAM Access from Clock Time 
Register 100 


T_CYC—SPD ROM SDRAM Cycle Time Register 99 
T_MAX_CK—SPD ROM Max Cycle Time Register 111 
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T_MAX_DQSQ—SPD ROM Max DQS-DQ Skew Time ViID—Vendor Identification Register 95, 96, 113 

Register 111 VOLT_LEVEL—SPD ROM DIMM Voltage Interface Level 
T_QHS—SPD ROM Max Read Data Hold Skew Time Register 99 

Register 11700 WE_LAT—SPD ROM Write Enable Latency Register 103 
ead ba Min Active to Precharge Time VNB (Virtual Northbridge) configuration registers 50 

icusead VOLT_LEVEL—SPD ROM DIMM Voltage Interface Level 

T_RCD—SPD ROM Min RAS to CAS Delay Register 107 Register (SDRAM) 99 
T_RC—SPD ROM Min Active to Auto-Refresh Time voltage, current 134 

Register 110 , 
T_RFC—SPD ROM Min Auto-Refresh to Cmd Time Ww 

Register 110 
T_RRD—SPD ROM Min Row to Row Active Delay WE_LAT—SPD ROM Write Enable Latency Register 

Register 107 (SDRAM) 103 


VCSDRAM—SPD ROM Reserved for VCSDRAM 
Register 110 
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